diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 2b5c9432c..16c0188a9 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -1,5 +1,7 @@
 # Pull Request Template
 
+> ⚠️ **Please open this PR against the `dev` branch, not `main`.** All contributions go through `dev`; `main` only receives release merges.
+
 ## Description
 Please include a summary of the change and which issue is fixed. 
 
@@ -10,6 +12,7 @@ Please include a summary of the change and which issue is fixed.
 - [ ] Documentation update
 
 ## Checklist:
+- [ ] This PR targets the `dev` branch, not `main`.
 - [ ] I have followed the contribution guidelines.
 - [ ] My code follows the style guidelines of this project.
 - [ ] I have performed a self-review of my own code.
diff --git a/AGENTS.md b/AGENTS.md
index 5e74380ce..13219fa1e 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -77,10 +77,15 @@ This project uses **pnpm** as its package manager (pinned via the `packageManage
 - **JavaScript only.** New files are `.js` / `.vue`; `<script setup>` has no `lang="ts"`. Do not rename `jsconfig.json` to `tsconfig.json` or otherwise introduce TypeScript.
 - **English by default** for source-code comments , commit messages and AGENTS.md files. Planning docs can be in other languages. Locale packs are obviously the exception — they contain user-facing copy in their respective language.
 
+### Functions
+
+- **New functions use `const` arrow syntax** — `const fn = (...) => {}` / `const fn = async (...) => {}`, not `function fn()` / `async function fn()` declarations. Object methods (store actions, the `analytics` API, etc.) keep their shorthand. Mind that arrow consts aren't hoisted: declare one before the code that uses it. This applies to **new / rewritten** code — don't mass-convert existing `function` declarations just to match; leave surrounding style intact when making an unrelated edit.
+
 ### Comments
 
 - **Every new file opens with a header comment** stating its purpose. One or two lines is usually enough; enough that a reader opening the file cold understands what it is.
 - **Large templates or functions carry block comments** on each meaningful section — enough for a maintainer six months later to orient quickly. Not every line, but every region / branch / step.
+- **Comments describe the code as it is now, not how it got here.** Explain the current "why" — don't narrate past states or read like a changelog (`previously…`, `replaced X in v7`, `this used to…`, `…fixes that`). Git history covers the past. A comment should stay shorter than the code it explains; if it's growing into a story, cut it.
 
 ### i18n coverage
 
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 6824564ad..b82597024 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -45,7 +45,7 @@ We love to hear your ideas! Open an issue with the tag `feature request` and pro
 Before making any changes, please:
 
 1. Open a new issue discussing your proposed change.
-2. Fork the repository and make your changes in a new branch.
+2. Fork the repository and create your branch from **`dev`** — all contributions are based on `dev`, not `main`.
 
 ### Setting Up Your Environment
 
@@ -64,9 +64,10 @@ Ensure that all tests pass and, if applicable, add new tests for your changes. R
 
 When you're ready to submit your changes:
 
-1. Rebase your branch to the latest `dev` branch.
-2. Ensure your changes adhere to the coding standards and guidelines.
-3. Submit a pull request with a clear description of your changes.
+1. **Open your pull request against the `dev` branch — not `main`.** `main` only receives release merges from `dev`, so any PR targeting `main` will be asked to retarget.
+2. Rebase your branch onto the latest `dev` before submitting.
+3. Keep one concern per PR — don't bundle unrelated changes (e.g. a feature plus a dev-environment tweak) into the same pull request.
+4. Ensure your changes adhere to the coding standards and guidelines, with a clear description of what you changed.
 
 ### Code Review Process
 
diff --git a/api/AGENTS.md b/api/AGENTS.md
index 5522516aa..8ca18a9fe 100644
--- a/api/AGENTS.md
+++ b/api/AGENTS.md
@@ -22,6 +22,8 @@ api/
 │   ipcheck-ing.js, maxmind.js   ← IP geolocation source handlers (route per source)
 ├── invisibility-test.js         ← /api/invisibility — proxy to private IPCheck.ing endpoint
 ├── mac-checker.js               ← /api/macchecker — MAC vendor lookup
+├── github-stars.js              ← /api/github-stars — repo star count via no-token
+│                                  GitHub fetch (edge-cached; replaces shields.io)
 ├── get-whois.js                 ← /api/whois — whoiser primary + RDAP fallback for new gTLDs
 ├── cf-radar.js                  ← /api/cfradar — ASN details via Cloudflare Radar
 ├── dns-resolver.js              ← /api/dnsresolver — DNS + DoH parallel query
diff --git a/api/asn-history.js b/api/asn-history.js
index b5014e3fa..c3ab8a16d 100644
--- a/api/asn-history.js
+++ b/api/asn-history.js
@@ -71,7 +71,9 @@ export default async (req, res) => {
     const minLen = MIN_PREFIX[family];
 
     try {
-        const apiRes = await fetchRoutingHistory(prefix);
+        // Push our peer floor down to RIPEstat so it drops sub-threshold rows
+        // during the scan — same MIN_PEERS we filter on below, single source.
+        const apiRes = await fetchRoutingHistory(prefix, { minPeersSeeing: MIN_PEERS });
         if (!apiRes.ok) {
             logger.warn({ prefix, status: apiRes.status }, 'RIPEstat routing-history non-2xx');
             return res.status(502).json({ error: 'Upstream error' });
diff --git a/api/github-stars.js b/api/github-stars.js
new file mode 100644
index 000000000..6ec847fc8
--- /dev/null
+++ b/api/github-stars.js
@@ -0,0 +1,35 @@
+// /api/github-stars — stargazer count for this repo, fetched from GitHub's
+// public REST API without a token (`stargazers_count` is available
+// unauthenticated). Edge-cached for a day (see backend-server.js), so behind
+// Cloudflare the origin hits GitHub at most once per cache window — well under
+// the 60 req/hour unauthenticated limit.
+import { fetchUpstream } from '../common/fetch-with-timeout.js';
+import logger from '../common/logger.js';
+
+// The project's own repository. GitHub requires a User-Agent on every request.
+const REPO = 'jason5ng32/MyIP';
+
+export default async (req, res) => {
+    // Defensive; app.get() in backend-server.js already gates method, but a
+    // dedicated smoke test asserts this branch directly against the handler.
+    if (req.method !== 'GET') {
+        return res.status(405).json({ message: 'Method Not Allowed' });
+    }
+
+    try {
+        const apiRes = await fetchUpstream(`https://api.github.com/repos/${REPO}`, {
+            headers: {
+                'Accept': 'application/vnd.github+json',
+                'User-Agent': 'MyIP-IPCheck.ing',
+            },
+        });
+        if (!apiRes.ok) {
+            throw new Error(`GitHub API responded ${apiRes.status}`);
+        }
+        const data = await apiRes.json();
+        res.json({ stars: data.stargazers_count ?? 0 });
+    } catch (error) {
+        logger.error({ err: error }, 'github-stars handler failed');
+        res.status(500).json({ error: 'Failed to fetch GitHub stars' });
+    }
+};
diff --git a/api/google-map.js b/api/google-map.js
index 8498560b9..ff58ebf4e 100644
--- a/api/google-map.js
+++ b/api/google-map.js
@@ -79,6 +79,11 @@ export default async (req, res) => {
             return res.status(apiRes.status).json({ error: `Upstream map API returned ${apiRes.status}` });
         }
         res.setHeader('Content-Type', apiRes.headers.get('content-type') || 'image/jpeg');
+        // Binary streams bypass the res.json hook in the cacheable() middleware,
+        // so apply the cache value it stashed on res.locals here on the 2xx path.
+        if (res.locals.cacheControl) {
+            res.setHeader('Cache-Control', res.locals.cacheControl);
+        }
         Readable.fromWeb(apiRes.body).pipe(res);
     } catch (e) {
         logger.error({ err: e, latitude, longitude, language, CanvasMode }, 'google-map handler failed');
diff --git a/backend-server.js b/backend-server.js
index 1f97f4380..9962d8569 100644
--- a/backend-server.js
+++ b/backend-server.js
@@ -31,6 +31,7 @@ import { getSessionResult as dnsLeakGetResult } from './api/dns-leak-test.js';
 import getWhois from './api/get-whois.js';
 import invisibilitytestHandler from './api/invisibility-test.js';
 import macChecker from './api/mac-checker.js';
+import githubStarsHandler from './api/github-stars.js';
 // User
 import validateConfigs from './api/configs.js';
 import getUserinfo from './api/get-user-info.js';
@@ -150,9 +151,9 @@ const rateLimiter = rateLimit({
 });
 
 const speedLimiter = slowDown({
-	windowMs: 60 * 60 * 1000,
-	delayAfter: speedLimitSet,
-	delayMs: (hits) => hits * 400,
+    windowMs: 60 * 60 * 1000,
+    delayAfter: speedLimitSet,
+    delayMs: (hits) => hits * 400,
 })
 
 if (rateLimitSet !== 0) {
@@ -175,13 +176,15 @@ app.use('/api', (req, res, next) => {
 });
 
 // Cache-Control middleware factory. Hooks res.json so the header is only
-// attached on 2xx — CF must not cache 4xx/5xx error pages. Binary streams
-// (res.send) bypass this and must set their own header if needed.
+// attached on 2xx — CF must not cache 4xx/5xx error pages. The intended cache
+// value is also stashed on res.locals.cacheControl so binary-stream handlers
+// (which bypass res.json) can apply it themselves on their own 2xx path.
 const cacheable = (maxAgeSeconds) => (req, res, next) => {
+    res.locals.cacheControl = `public, max-age=${maxAgeSeconds}`;
     const originalJson = res.json.bind(res);
     res.json = function (body) {
         if (res.statusCode < 400) {
-            res.setHeader('Cache-Control', `public, max-age=${maxAgeSeconds}`);
+            res.setHeader('Cache-Control', res.locals.cacheControl);
         }
         return originalJson(body);
     };
@@ -193,28 +196,33 @@ const cacheable = (maxAgeSeconds) => (req, res, next) => {
 app.use('/api', requireReferer);
 
 const FIVE_MIN_CACHE = 5 * 60;
-const ONE_HOUR_CACHE = 60 * 60;
 const ONE_DAY_CACHE = 24 * 60 * 60;
-const ONE_WEEK_CACHE = 7 * 24 * 60 * 60;
 const THIRTY_DAYS_CACHE = 30 * 24 * 60 * 60;
+const ONE_YEAR_CACHE = 365 * 24 * 60 * 60;
 
 // Cacheable routes — TTLs picked against each upstream's natural refresh cadence.
-app.get('/api/ipinfo', requireValidIP(), cacheable(ONE_HOUR_CACHE), ipinfoHandler);
-app.get('/api/ipapicom', requireValidIP(), cacheable(ONE_HOUR_CACHE), ipapicomHandler);
-app.get('/api/ipsb', requireValidIP(), cacheable(ONE_HOUR_CACHE), ipsbHandler);
-app.get('/api/cfradar', cacheable(ONE_WEEK_CACHE), cfHander);
-app.get('/api/asn-history', requireValidPrefix(), cacheable(ONE_WEEK_CACHE), asnHistoryHandler);
-app.get('/api/asn-connectivity', requireValidASN(), cacheable(ONE_WEEK_CACHE), asnConnectivityHandler);
-app.get('/api/whois', cacheable(ONE_HOUR_CACHE), getWhois);
-app.get('/api/ipapiis', requireValidIP(), cacheable(ONE_HOUR_CACHE), ipapiisHandler);
-app.get('/api/ip2location', requireValidIP(), cacheable(ONE_HOUR_CACHE), ip2locationHandler);
-app.get('/api/macchecker', cacheable(THIRTY_DAYS_CACHE), macChecker);
-app.get('/api/maxmind', requireValidIP(), cacheable(ONE_DAY_CACHE), maxmindHandler);
+// Short Cache
 app.get('/api/service-status', cacheable(FIVE_MIN_CACHE), serviceStatusHandler);
 app.get('/api/service-status/detail', requireValidProviderId(), cacheable(FIVE_MIN_CACHE), serviceStatusDetailHandler);
-
+// Cache for 1 day
+app.get('/api/ipinfo', requireValidIP(), cacheable(ONE_DAY_CACHE), ipinfoHandler);
+app.get('/api/ipapicom', requireValidIP(), cacheable(ONE_DAY_CACHE), ipapicomHandler);
+app.get('/api/ipsb', requireValidIP(), cacheable(ONE_DAY_CACHE), ipsbHandler);
+app.get('/api/ipapiis', requireValidIP(), cacheable(ONE_DAY_CACHE), ipapiisHandler);
+app.get('/api/ip2location', requireValidIP(), cacheable(ONE_DAY_CACHE), ip2locationHandler);
+app.get('/api/maxmind', requireValidIP(), cacheable(ONE_DAY_CACHE), maxmindHandler);
+app.get('/api/whois', cacheable(ONE_DAY_CACHE), getWhois);
+app.get('/api/github-stars', cacheable(ONE_DAY_CACHE), githubStarsHandler);
+// Cache for 30 days — registry / historical data that changes on a monthly
+// (or slower) cadence: IEEE OUI assignments, ASN metadata, ASN interconnection,
+// and append-only BGP routing history.
+app.get('/api/cfradar', cacheable(THIRTY_DAYS_CACHE), cfHander);
+app.get('/api/asn-history', requireValidPrefix(), cacheable(THIRTY_DAYS_CACHE), asnHistoryHandler);
+app.get('/api/asn-connectivity', requireValidASN(), cacheable(THIRTY_DAYS_CACHE), asnConnectivityHandler);
+app.get('/api/macchecker', cacheable(THIRTY_DAYS_CACHE), macChecker);
+// Long Cache
+app.get('/api/map', cacheable(ONE_YEAR_CACHE), mapHandler);
 // Non-cacheable routes — auth-context, debug tools, or per-request lookups.
-app.get('/api/map', mapHandler);
 app.get('/api/ipchecking', requireValidIP(), ipCheckingHandler);
 app.get('/api/dnsresolver', dnsResolver);
 app.get('/api/dnsleaktest/session/:token', dnsLeakGetResult);
diff --git a/common/ripestat.js b/common/ripestat.js
index 0e4ca9939..1ab60b58a 100644
--- a/common/ripestat.js
+++ b/common/ripestat.js
@@ -7,8 +7,8 @@ import { lookupAsOrgName } from './as-org-db.js';
 const BASE_URL = 'https://stat.ripe.net/data';
 const SOURCE_APP = process.env.RIPESTAT_SOURCE_APP || 'myip';
 
-function fetchRipestat(endpoint, resource, { timeoutMs = 8000 } = {}) {
-    const search = new URLSearchParams({ resource, sourceapp: SOURCE_APP });
+function fetchRipestat(endpoint, resource, { timeoutMs = 8000, params = {} } = {}) {
+    const search = new URLSearchParams({ resource, sourceapp: SOURCE_APP, ...params });
     return fetchUpstream(`${BASE_URL}/${endpoint}/data.json?${search}`, { timeoutMs });
 }
 
@@ -19,9 +19,16 @@ export function fetchAsOverview(asn, { timeoutMs = 3000 } = {}) {
 
 /** routing-history: historical AS announcements for a prefix or IP.
  *  Slow analytical endpoint — scans years of BGP data, regularly takes
- *  10–20s for prefixes with long history. */
-export function fetchRoutingHistory(resource, { timeoutMs = 25000 } = {}) {
-    return fetchRipestat('routing-history', resource, { timeoutMs });
+ *  10–20s for prefixes with long history.
+ *
+ *  Pass `minPeersSeeing` to push the caller's peer floor down to RIPEstat:
+ *  rows seen by fewer RIS peers are route noise the caller would discard
+ *  anyway, so dropping them during the scan trims the response without
+ *  changing the result. The threshold is owned by the caller (asn-history's
+ *  MIN_PEERS) — omit it and RIPEstat keeps its own default. */
+export function fetchRoutingHistory(resource, { timeoutMs = 25000, minPeersSeeing } = {}) {
+    const params = minPeersSeeing != null ? { min_peers_seeing: minPeersSeeing } : {};
+    return fetchRipestat('routing-history', resource, { timeoutMs, params });
 }
 
 /**
diff --git a/frontend/AGENTS.md b/frontend/AGENTS.md
index 33ad4ab73..834eeb427 100644
--- a/frontend/AGENTS.md
+++ b/frontend/AGENTS.md
@@ -22,7 +22,10 @@ frontend/
 │                                  display mode, which is utils/pwa.js's
 │                                  isRunningAsPwa()). Advanced tools also open
 │                                  in-page via the `?tool=<slug>` query on `/`.
-├── locales/                     ← i18n copy (en / zh / fr / tr) + security-checklist data
+│                                  `/privacy` → PrivacyPolicy.vue (standalone page).
+├── locales/                     ← i18n copy (en / zh / fr / tr) + on-demand
+│                                  sub-packs (security-checklist/ · privacy/)
+│                                  loaded by their own page, not the main bundle
 ├── style/style.css              ← Tailwind v4 entry + design tokens
 ├── lib/                         ← cn() helper (tailwind-merge + clsx)
 ├── data/                        ← static config
@@ -47,6 +50,9 @@ frontend/
 └── components/
     ├── Home.vue                 ← the homepage (`/` route): all top-level sections + the drawer
     ├── StandaloneTool.vue       ← `/tools/:slug` page: one tool in a minimal full-page layout
+    ├── PrivacyPolicy.vue        ← `/privacy` page (standalone layout)
+    ├── StandalonePageHeader.vue ← slim header shared by StandaloneTool + PrivacyPolicy
+    │                              (brand → home + breadcrumb + back link; NOT Nav.vue)
     ├── *.vue                    ← top-level sections (IpInfos / Connectivity / WebRTC / DnsLeaks
     │                              / SpeedTest / Advanced / Footer / Nav / Achievements / User /
     │                              Additional)
diff --git a/frontend/App.vue b/frontend/App.vue
index 11e217a88..a4464b9a9 100644
--- a/frontend/App.vue
+++ b/frontend/App.vue
@@ -17,15 +17,17 @@ import Alert from './components/widgets/Toast.vue';
 import PWA from './components/widgets/PWA.vue';
 import { useTheme } from '@/composables/use-theme.js';
 
-// The standalone tool pages (/tools/:slug) drop the homepage's fixed-Nav body
-// padding (see the `body.jn-standalone-page` rule in index.html). Toggle the
-// marker class as the route changes. NB: "tool page" here is unrelated to PWA
-// display mode — that's `isRunningAsPwa()` in utils/pwa.js.
+// The standalone pages (/tools/:slug, /privacy) carry their own header, so they
+// drop the homepage's fixed-Nav body padding (see the `body.jn-standalone-page`
+// rule in index.html) — otherwise a blank strip shows above their header. Toggle
+// the marker class as the route changes. NB: "standalone" here is unrelated to
+// PWA display mode — that's `isRunningAsPwa()` in utils/pwa.js.
+const STANDALONE_ROUTES = new Set(['tool', 'privacy']);
 const route = useRoute();
 watch(
-    () => route.name === 'tool',
-    (isToolPage) => {
-        document.body.classList.toggle('jn-standalone-page', isToolPage);
+    () => STANDALONE_ROUTES.has(route.name),
+    (isStandalone) => {
+        document.body.classList.toggle('jn-standalone-page', isStandalone);
     },
     { immediate: true },
 );
diff --git a/frontend/components/ConnectivityTest.vue b/frontend/components/ConnectivityTest.vue
index 5b4a95585..428ad22b7 100644
--- a/frontend/components/ConnectivityTest.vue
+++ b/frontend/components/ConnectivityTest.vue
@@ -8,7 +8,7 @@
         </h2>
         <JnTooltip :text="t('Tooltips.RefreshConnectivityTests')" side="left">
           <Button size="icon" variant="outline" class="shrink-0 cursor-pointer"
-            @click="checkAllConnectivity(false, true, true)" aria-label="Refresh Connectivity Test">
+            @click="handelCheckStart('manual')" aria-label="Refresh Connectivity Test">
             <component :is="isStarted ? RotateCw : Play" />
           </Button>
         </JnTooltip>
@@ -510,12 +510,20 @@ const finalizeMultiTestAlert = () => {
 };
 
 // ── Main control ───────────────────────────────────────────────────────────
-const handelCheckStart = async (fromApp = false) => {
+// `trigger` selects three behaviors (arming the toast = setting alertToShow):
+//   'boot'    — startup auto-run: arm toast, no card reset, auto pass (records rounds)
+//   'manual'  — section refresh button: arm toast, reset cards, single pass
+//   'refresh' — global "refresh everything": suppress toast (global alert covers it), reset cards
+const handelCheckStart = async (trigger = 'boot') => {
   const multi = multipleTests.value;
-  if (fromApp) await checkAllConnectivity(false, true, true);
-  else await checkAllConnectivity(true, false, false);
+  const isAuto = trigger === 'boot';
+  const showToast = trigger !== 'refresh';
+  const resetCards = trigger !== 'boot';
+  await checkAllConnectivity(showToast, resetCards, !isAuto);
   store.setLoadingStatus('Connectivity', true);
-  if (multi) {
+  // Multi-round follow-ups are a startup-only feature; manual/global refreshes
+  // are a single pass and flag completion immediately so the toast can fire.
+  if (multi && isAuto) {
     intervalId.value = setInterval(async () => {
       if (counter.value < maxCounts.value && !manualRun.value) {
         await checkAllConnectivity(false, false, false);
diff --git a/frontend/components/DnsLeaksTest.vue b/frontend/components/DnsLeaksTest.vue
index 16bb05901..fa5dad74a 100644
--- a/frontend/components/DnsLeaksTest.vue
+++ b/frontend/components/DnsLeaksTest.vue
@@ -50,7 +50,7 @@
               <span class="relative inline-flex size-2 rounded-full" :class="dotClass(toneOf(leak))"></span>
             </span>
             <FitText :text="leak.ip" :tiers="INLINE_TIERS" :title="leak.ip" class="font-mono min-w-0"
-              :class="textClass(toneOf(leak))" data-mask="ip" />
+              :class="textClass(toneOf(leak))" :data-mask="maskAttr(leak.ip)" />
           </div>
 
           <!-- ISP + Country sub-block -->
@@ -122,6 +122,7 @@ import { JnTooltip } from '@/components/ui/tooltip';
 import { Button } from '@/components/ui/button';
 import { Card, CardContent } from '@/components/ui/card';
 import { useStatusTone, ipFieldTone, isFieldPending as isFieldPendingShared } from '@/composables/use-status-tone.js';
+import { createMaskGate } from '@/composables/use-info-mask.js';
 import { useMaxmind } from '@/composables/use-maxmind.js';
 import { EthernetPort, Play, MapPin, RotateCw, Sparkles, ArrowRight, DoorOpen } from '@lucide/vue';
 import { Icon } from '@iconify/vue';
@@ -140,6 +141,8 @@ const { t } = useI18n();
 const store = useMainStore();
 const router = useRouter();
 const { lookupMaxmind } = useMaxmind();
+// Skip the info-mask blur on waiting/error placeholders (not a real IP).
+const maskAttr = createMaskGate(t);
 const isStarted = ref(false);
 const userPreferences = computed(() => store.userPreferences);
 const isSimpleMode = computed(() => userPreferences.value.simpleMode);
diff --git a/frontend/components/Footer.vue b/frontend/components/Footer.vue
index 665143318..1552f7707 100644
--- a/frontend/components/Footer.vue
+++ b/frontend/components/Footer.vue
@@ -1,39 +1,54 @@
 <template>
-  <footer class="mt-10 pb-6 text-sm text-muted-foreground">
-    <!-- Author + Github -->
-    <div class="flex items-center justify-center gap-1.5 mb-3">
-      <span>Created by Jason Ng with love</span>
-      <JnTooltip :text="t('Tooltips.GithubLink')" side="top">
-        <Button variant="ghost" size="icon" as-child class="size-6 text-foreground/70 hover:text-foreground">
-          <a :href="t('page.footerLink')" target="_blank" rel="noopener" aria-label="Github"
-            @click="trackEvent('Footer', 'FooterClick', 'Github')">
-            <Icon icon="ri:github-line" />
-          </a>
-        </Button>
-      </JnTooltip>
-    </div>
-
-    <!-- Sponsor / About entry -->
-    <div class="flex items-center justify-center gap-2 mb-3">
+  <footer class="pb-6 text-sm text-muted-foreground">
+    <!-- Primary footer links: Sponsor / Privacy / About / Changelog / Special
+         Thanks. The last three open the same About sheet on their own tab.
+         Text-only (no per-button icons) to keep the row calm. -->
+    <div class="flex flex-wrap items-center justify-center gap-x-3 mb-2 max-w-[70%] mx-auto">
       <Button variant="link" size="default" as-child class="text-[#d63384] hover:text-[#d63384]">
         <a href="https://github.com/sponsors/jason5ng32" target="_blank" rel="noopener">
-          {{ t('about.Sponsor') }} 💖
+          {{ t('about.Sponsor') }}
         </a>
       </Button>
-      <Button variant="ghost" size="default" @click="openAbout" class="cursor-pointer">
+      <Button variant="link" size="default" as-child class="cursor-pointer">
+        <RouterLink to="/privacy" @click="trackEvent('Footer', 'FooterClick', 'Privacy')">
+          {{ t('about.Privacy') }}
+        </RouterLink>
+      </Button>
+      <Button variant="link" size="default" @click="openAboutTab('changelog', 'Changelog')" class="cursor-pointer">
+        {{ t('changelog.Title') }}
+      </Button>
+      <Button variant="link" size="default" @click="openAboutTab('specialthanks', 'SpecialThanks')"
+        class="cursor-pointer">
+        {{ t('specialthanks.Title') }}
+      </Button>
+      <Button variant="link" size="default" @click="openAbout" class="cursor-pointer">
         {{ t('about.Title') }}
-        <ArrowLeftCircle class="size-3.5" />
       </Button>
     </div>
 
-    <!-- Copyright -->
-    <p v-if="!configs.originalSite" class="text-center text-xs opacity-70">
-      {{ t('page.copyRightName') }}
-      <a :href="t('page.copyRightLink')" target="_blank" rel="noopener"
-        class="text-foreground/80 hover:text-foreground hover:underline">
-        {{ t('page.copyRightLinkName') }}
-      </a>
-    </p>
+    <!-- Author + GitHub on one line, copyright dimmed beneath — low-emphasis signature block -->
+    <div class="flex flex-col items-center justify-center gap-y-1.5 text-xs opacity-70">
+      <div class="flex items-center justify-center gap-x-2">
+        <span>Created by Jason Ng with love</span>
+        <JnTooltip :text="t('Tooltips.GithubLink')" side="top">
+          <Button variant="ghost" size="icon" as-child class="size-5 text-foreground/70 hover:text-foreground">
+            <a :href="t('page.footerLink')" target="_blank" rel="noopener" aria-label="Github"
+              @click="trackEvent('Footer', 'FooterClick', 'Github')">
+              <Icon icon="ri:github-line" />
+            </a>
+          </Button>
+        </JnTooltip>
+      </div>
+      <template v-if="!configs.originalSite">
+        <span>
+          {{ t('page.copyRightName') }}
+          <a :href="t('page.copyRightLink')" target="_blank" rel="noopener"
+            class="text-foreground/80 hover:text-foreground hover:underline">
+            {{ t('page.copyRightLinkName') }}
+          </a>
+        </span>
+      </template>
+    </div>
 
     <!-- About Sheet -->
     <Sheet :open="isOpen" @update:open="onOpenChange">
@@ -99,9 +114,8 @@
                 <ul class="space-y-2">
                   <li v-for="(item, idx) in version.content" :key="idx" class="flex items-start gap-2 text-sm">
                     <Badge :class="changelogBadgeClass(item.type)"
-                      class="shrink-0 shadow-none! rounded-full justify-center text-secondary p-1" 
-                      :title="t('changelog.' + item.type)"
-                      >
+                      class="shrink-0 shadow-none! rounded-full justify-center text-secondary p-1"
+                      :title="t('changelog.' + item.type)">
                       <CircleFadingArrowUp v-if="item.type === 'improve'" class="size-3.5" />
                       <CirclePlus v-if="item.type === 'add'" class="size-3.5" />
                       <BugOff v-if="item.type === 'fix'" class="size-3.5" />
@@ -151,7 +165,7 @@ import { Button } from '@/components/ui/button';
 import { Tabs, TabsList, TabsTrigger, TabsContent } from '@/components/ui/tabs';
 import { Badge } from '@/components/ui/badge';
 import { Separator } from '@/components/ui/separator';
-import { ArrowLeftCircle, Compass, ExternalLink, Smile, SquareArrowOutUpRight, CircleFadingArrowUp, CirclePlus, BugOff} from '@lucide/vue';
+import { Compass, ExternalLink, Smile, SquareArrowOutUpRight, CircleFadingArrowUp, CirclePlus, BugOff } from '@lucide/vue';
 import { Icon } from '@iconify/vue';
 
 const { t, locale } = useI18n();
@@ -169,7 +183,7 @@ const sheetBody = ref(null);
 const personalLinks = [
   { href: 'https://wujiaxian.com', labelKey: 'about.personal' },
   { href: 'https://kenengba.com', labelKey: 'about.blog' },
-  { href: 'https://fire.beavern.com', labelKey: 'about.retiremoney' },
+  { href: 'https://www.linkedin.com/in/jason5ng32/', labelKey: 'about.linkedIn' },
   { href: 'https://twitter.com/jason5ng32', labelKey: 'about.twitter' },
 ];
 
@@ -203,10 +217,20 @@ const onOpenChange = (val) => {
 };
 
 const openAbout = () => {
+  content.value = 'about';
   store.toggleSheet('about');
   trackEvent('Footer', 'FooterClick', 'About');
 };
 
+// Direct-entry shortcuts: open the same About sheet but jump straight to the
+// changelog / special-thanks tab. Plain open (not toggle) so a second click
+// from another tab just switches tabs instead of closing the sheet.
+const openAboutTab = (tab, trackLabel) => {
+  content.value = tab;
+  store.setOpenSheet('about');
+  trackEvent('Footer', 'FooterClick', trackLabel);
+};
+
 watch(content, () => {
   nextTick(() => {
     if (sheetBody.value) sheetBody.value.scrollTop = 0;
diff --git a/frontend/components/IpInfos.vue b/frontend/components/IpInfos.vue
index 933324e9b..e7ea13c11 100644
--- a/frontend/components/IpInfos.vue
+++ b/frontend/components/IpInfos.vue
@@ -18,8 +18,7 @@
         :id="'IPInfoCard-' + (index + 1)" class="flex"
         :class="{ 'opacity-60': !card.ip || card.ip === t('ipInfos.IPv4Error') || card.ip === t('ipInfos.IPv6Error') }">
         <IPCard class="w-full" :card="card" :index="index" :isDarkMode="isDarkMode" :isMobile="isMobile"
-          :ipGeoSource="ipGeoSource"
-          :configs="configs" :asnInfos="asnInfos" :asnHistoryInfos="asnHistoryInfos"
+          :ipGeoSource="ipGeoSource" :configs="configs" :asnInfos="asnInfos" :asnHistoryInfos="asnHistoryInfos"
           :asnConnectivityInfos="asnConnectivityInfos" @refresh-card="refreshCard" />
       </div>
     </div>
@@ -126,9 +125,10 @@ const fetchStatus = reactive([]);
 let pendingIPDetailsRequests = new Map();
 let ipDataCache = new Map();
 
-// IP acquisition runs in two phases: resolveIP paints the IP the moment it
-// resolves; loadCardDetails fills in geo data. checkAllIPs runs phase 1 for all
-// cards in parallel, then phase 2 probe-then-fan-out; refreshCard reuses both.
+// Each card is an independent pipeline: resolveIP paints the IP the moment it
+// resolves, then loadCardDetails fills in its geo data. fetchIP chains the two
+// for one card; checkAllIPs and refreshCard both drive cards through fetchIP, so
+// a slow or failing source only ever delays its own card — never the others.
 
 // Settle a card's fetch status — drives the global IPInfo loading indicator.
 const markFetched = (cardID) => {
@@ -197,8 +197,9 @@ const trackFetchStatus = (status) => {
   }
 };
 
-// Resolve all IPs in parallel (no stagger), then load details probe-then-fan-out:
-// await the first valid card so a dead source fails over once, then parallelize.
+// Drive every card through its own resolve→detail pipeline, all in parallel.
+// allSettled so one card can't sink the batch (fetchIP already swallows per-card
+// errors — this is belt-and-suspenders). Cards paint independently as they land.
 const checkAllIPs = async () => {
   const ipSources = [
     [0, getIPFromIPChecking4],
@@ -209,14 +210,9 @@ const checkAllIPs = async () => {
     [5, getIPFromIPChecking64],
   ].slice(0, ipCardsToShow.value);
 
-  const resolved = await Promise.all(
-    ipSources.map(([cardID, getFromSource]) => resolveIP(cardID, getFromSource))
+  await Promise.allSettled(
+    ipSources.map(([cardID, getFromSource]) => fetchIP(cardID, getFromSource))
   );
-
-  const pending = resolved.filter((r) => r.ip !== null);
-  const probe = pending.shift();
-  if (probe) await loadCardDetails(probe.cardID, probe.ip);
-  await Promise.allSettled(pending.map((r) => loadCardDetails(r.cardID, r.ip)));
 };
 
 // Get IP details from IP address
@@ -293,7 +289,8 @@ const fetchIPDetails = async (cardIndex, ip, sourceID = null) => {
 };
 
 // Re-fetch geo details for every card when the user picks a new IP database.
-// Same probe-then-fan-out as checkAllIPs, no stagger.
+// Each card queries independently in parallel — no probe — so a slow or failing
+// card never blocks the rest.
 const selectIPGeoSource = async () => {
   // Clear stale detail fields, keep IP + map.
   ipDataCards.forEach((card) => {
@@ -302,20 +299,15 @@ const selectIPGeoSource = async () => {
   });
   ipDataCache.clear();
 
-  // Cards that actually hold an IP, in display order.
-  const cards = ipDataCards
-    .map((card, index) => ({ card, index }))
-    .filter(({ card }) => isValidIP(card.ip));
-
-  // Probe the first card so a failed source fails over once, then reuse the
-  // settled source for the rest in parallel.
-  const probe = cards.shift();
-  if (!probe) return;
-  await fetchIPDetails(probe.index, probe.card.ip, ipGeoSource.value);
-  const settledSource = ipGeoSource.value;
-
+  // Query every card that holds a valid IP against the chosen source, in
+  // parallel. Captured once so an in-flight fetchIPDetails mutating
+  // ipGeoSource.value can't shift the source mid-batch.
+  const chosenSource = ipGeoSource.value;
   await Promise.allSettled(
-    cards.map(({ card, index }) => fetchIPDetails(index, card.ip, settledSource))
+    ipDataCards
+      .map((card, index) => ({ card, index }))
+      .filter(({ card }) => isValidIP(card.ip))
+      .map(({ card, index }) => fetchIPDetails(index, card.ip, chosenSource))
   );
 };
 
diff --git a/frontend/components/Nav.vue b/frontend/components/Nav.vue
index f52b9a43f..bde68140a 100644
--- a/frontend/components/Nav.vue
+++ b/frontend/components/Nav.vue
@@ -31,29 +31,61 @@
 
       <!-- Middle: Desktop nav links + GitHub star badge (left aligned, next to brand) -->
       <div v-if="!isMobile" class="flex items-center gap-0.5">
-        <a v-for="item in navItems" :key="item" href="#" class="" :class="navLinkClass(item)"
-          @click.prevent="scrollToSection(item); trackEvent('Nav', 'NavClick', item)">
-          {{ t(`nav.${item}`) }}
-        </a>
-        <a :href="t('page.footerLink')" target="_blank" rel="noopener"
-          class="ml-2 inline-flex items-center hover:opacity-80 transition-opacity" aria-label="View source on GitHub">
-          <img src="https://img.shields.io/github/stars/jason5ng32/MyIP" alt="GitHub stars" class="h-5">
-        </a>
+        <template v-for="item in navItems" :key="item">
+          <!-- Advanced Tools: hover reveals the sub-tools, click scrolls to the
+               section (disable-click-trigger frees the click from toggling the
+               menu; viewport=false anchors the panel under the trigger). -->
+          <NavigationMenu v-if="item === 'AdvancedTools'" as="div" :viewport="false" :disable-click-trigger="true"
+            class="flex-none">
+            <NavigationMenuList>
+              <NavigationMenuItem>
+                <NavigationMenuTrigger :class="['h-auto bg-transparent', navLinkClass(item)]"
+                  @click="scrollToSection('AdvancedTools'); trackEvent('Nav', 'NavClick', item)">
+                  {{ t(`nav.${item}`) }}
+                </NavigationMenuTrigger>
+                <NavigationMenuContent class="z-50">
+                  <!-- Two-column grid on PC -->
+                  <ul class="relative grid grid-cols-2 gap-x-4 gap-y-0.5 min-w-[24rem]">
+                    <span aria-hidden="true"
+                      class="pointer-events-none absolute inset-y-1 left-1/2 w-px -translate-x-1/2 bg-border"></span>
+                    <li v-for="tool in advancedTools" :key="tool.slug">
+                      <NavigationMenuLink as-child class="cursor-pointer">
+                        <button type="button" class="w-full truncate text-left" @click="openTool(tool.slug)">
+                          {{ t(tool.titleKey) }}
+                        </button>
+                      </NavigationMenuLink>
+                    </li>
+                  </ul>
+                </NavigationMenuContent>
+              </NavigationMenuItem>
+            </NavigationMenuList>
+          </NavigationMenu>
+          <!-- All other sections stay plain smooth-scroll anchors. -->
+          <a v-else href="#" :class="navLinkClass(item)"
+            @click.prevent="scrollToSection(item); trackEvent('Nav', 'NavClick', item)">
+            {{ t(`nav.${item}`) }}
+          </a>
+        </template>
+        <!-- GitHub repo link + star count from our own /api/github-stars
+             (edge-cached). The count is hidden until it lands / on error, so the
+             link itself never depends on the fetch. -->
+        <Badge variant="outline" v-if="githubStarsLabel">
+          <a :href="t('page.footerLink')" target="_blank" rel="noopener" class="inline-flex items-center gap-1"
+            aria-label="Star on GitHub" title="Star on GitHub">
+            <Icon icon="ri:star-fill" class="size-3.5 text-yellow-400" />
+            <span class="tabular-nums">{{ githubStarsLabel }}</span>
+            <Icon icon="ri:github-line" class="size-3.5" />
+          </a>
+        </Badge>
       </div>
 
       <!-- Right: Action area (ml-auto push to the right) -->
       <div class="ml-auto flex items-center gap-2">
-        <!-- Mobile: GitHub icon -->
-        <Button v-if="isMobile" variant="ghost" size="icon" class="size-8" as-child>
-          <a :href="t('page.footerLink')" target="_blank" rel="noopener" aria-label="View source on GitHub">
-            <Icon icon="ri:github-line" />
-          </a>
-        </Button>
-
         <!-- Preferences -->
         <JnTooltip :text="t('shortcutKeys.Preferences')">
-          <Button variant="ghost" size="icon" class="size-8 cursor-pointer" aria-label="Open preferences" @click="OpenPreferences">
-            <SlidersHorizontal />
+          <Button variant="ghost" size="icon" class="size-8 cursor-pointer" aria-label="Open preferences"
+            @click="OpenPreferences">
+            <Cog />
           </Button>
         </JnTooltip>
 
@@ -148,22 +180,53 @@
       </div>
     </nav>
 
-    <!-- Mobile navigation drawer -->
+    <!-- Mobile navigation drawer. Flex column so the link list scrolls instead
+         of clipping on short screens when Advanced Tools is expanded. -->
     <Sheet v-if="isMobile" :open="isNavMenuOpen" @update:open="onNavMenuChange">
-      <SheetContent side="left" class="w-72 p-0" :title="t('nav.Navigation')">
-        <div class="flex items-center justify-between border-b px-4 py-3">
+      <SheetContent side="left" class="w-72 p-0 flex flex-col gap-0" :title="t('nav.Navigation')">
+        <div class="flex shrink-0 items-center justify-between border-b px-4 py-3">
           <h5 class="m-0 text-base font-semibold">{{ t('nav.Navigation') }}</h5>
           <SheetClose />
         </div>
-        <nav class="flex flex-col gap-0.5 p-3">
-          <a v-for="item in navItems" :key="item" href="#" :class="navLinkClass(item, { block: true })"
-            @click.prevent="scrollToSection(item); trackEvent('Nav', 'NavClick', item); store.setOpenSheet(null)">
-            {{ t(`nav.${item}`) }}
-          </a>
+        <nav class="flex min-h-0 flex-1 flex-col gap-0.5 overflow-y-auto p-3">
+          <template v-for="item in navItems" :key="item">
+            <!-- Advanced Tools expands inline into its sub-tools (open by default)
+                 so they're discoverable, not hidden behind a bare label. -->
+            <Collapsible v-if="item === 'AdvancedTools'" v-model:open="mobileToolsOpen">
+              <CollapsibleTrigger as-child>
+                <button type="button"
+                  :class="[navLinkClass(item, { block: true }), 'flex w-full items-center justify-between']">
+                  <span>{{ t(`nav.${item}`) }}</span>
+                  <ChevronDown class="size-4 shrink-0 opacity-60 transition-transform duration-200"
+                    :class="{ 'rotate-180': mobileToolsOpen }" />
+                </button>
+              </CollapsibleTrigger>
+              <CollapsibleContent>
+                <div class="my-0.5 ml-3 flex flex-col gap-0.5 border-l pl-3">
+                  <button v-for="tool in advancedTools" :key="tool.slug" type="button"
+                    class="block w-full truncate rounded-md px-3 py-1.5 text-left text-sm text-muted-foreground transition-colors hover:bg-accent/50 hover:text-foreground"
+                    @click="openTool(tool.slug)">
+                    {{ t(tool.titleKey) }}
+                  </button>
+                </div>
+              </CollapsibleContent>
+            </Collapsible>
+            <!-- All other sections stay plain smooth-scroll anchors. -->
+            <a v-else href="#" :class="navLinkClass(item, { block: true })"
+              @click.prevent="scrollToSection(item); trackEvent('Nav', 'NavClick', item); store.setOpenSheet(null)">
+              {{ t(`nav.${item}`) }}
+            </a>
+          </template>
           <a :href="t('page.footerLink')" target="_blank" rel="noopener"
-            class="mt-3 inline-flex items-center gap-2 rounded-md border px-3 py-2 text-sm font-medium hover:bg-muted">
+            class="mt-3 flex items-center gap-2 rounded-md border px-3 py-2 text-sm font-medium hover:bg-muted">
             <Icon icon="ri:github-line" class="size-4" />
             <span>Star on GitHub</span>
+            <!-- Same /api/github-stars count as the desktop badge (fetched on
+                 mount); hidden until it lands / on error. -->
+            <span v-if="githubStarsLabel" class="ml-auto tabular-nums text-muted-foreground inline-flex items-center gap-1">
+              <Icon icon="ri:star-fill" class="size-3.5 text-yellow-400" />
+              {{ githubStarsLabel }}
+            </span>
           </a>
         </nav>
       </SheetContent>
@@ -173,11 +236,21 @@
 
 <script setup>
 import { ref, computed, watch, onMounted, onBeforeUnmount } from 'vue';
+import { useRouter } from 'vue-router';
 import { useMainStore } from '@/store';
 import { useI18n } from 'vue-i18n';
 import { trackEvent } from '@/utils/analytics';
 import unixToDateTime from '@/utils/timestamp-to-date';
 import { Sheet, SheetContent, SheetClose } from '@/components/ui/sheet';
+import { Collapsible, CollapsibleTrigger, CollapsibleContent } from '@/components/ui/collapsible';
+import {
+  NavigationMenu,
+  NavigationMenuList,
+  NavigationMenuItem,
+  NavigationMenuTrigger,
+  NavigationMenuContent,
+  NavigationMenuLink,
+} from '@/components/ui/navigation-menu';
 import { Badge } from '@/components/ui/badge';
 import { Button } from '@/components/ui/button';
 import { JnTooltip } from '@/components/ui/tooltip';
@@ -190,20 +263,24 @@ import {
 } from '@/components/ui/dropdown-menu';
 import {
   Award, ChevronDown, HeartHandshake,
-  LogOut, Menu, SlidersHorizontal,
+  LogOut, Menu, Cog,
 } from '@lucide/vue';
 import { Icon } from '@iconify/vue';
 import brandIcon from './svgicons/Brand.vue';
 import { SECTION_IDS } from '@/data/sections';
+import { ADVANCED_TOOLS } from '@/data/tools.js';
+import { fetchWithTimeout } from '@/utils/fetch-with-timeout.js';
+import { formatStarCount } from '@/utils/format-star-count.js';
 import { isRunningAsPwa } from '@/utils/pwa.js';
 
 const { t } = useI18n();
 const store = useMainStore();
+const router = useRouter();
 
 const isDarkMode = computed(() => store.isDarkMode);
 const isMobile = computed(() => store.isMobile);
 const currentSection = computed(() => store.currentSection);
-const loaded = ref(false);
+const loaded = computed(() => store.allHasLoaded);
 
 // Running as an installed PWA (chromeless window). Distinct from the app's
 // "standalone tool pages" — see utils/pwa.js.
@@ -211,6 +288,31 @@ const isPwa = isRunningAsPwa();
 
 const navItems = SECTION_IDS;
 
+// Tools shown in the nav, mirroring Advanced.vue's enabledCards: original-site-
+// only tools stay hidden on self-hosted instances. Reactive on configs.
+const configs = computed(() => store.configs);
+const advancedTools = computed(() =>
+  ADVANCED_TOOLS.filter((tool) => !tool.requiresOriginalSite || configs.value.originalSite),
+);
+
+// Mobile: Advanced Tools sub-list expanded by default for discoverability.
+const mobileToolsOpen = ref(true);
+
+// GitHub star count for the repo badge. Fetched from our own edge-cached
+// endpoint; stays null (badge hides the count) if the request fails.
+const githubStars = ref(null);
+const githubStarsLabel = computed(() => formatStarCount(githubStars.value));
+const fetchGithubStars = async () => {
+  try {
+    const res = await fetchWithTimeout('/api/github-stars');
+    if (!res.ok) return;
+    const data = await res.json();
+    if (typeof data.stars === 'number') githubStars.value = data.stars;
+  } catch {
+    /* leave the badge without a count */
+  }
+};
+
 // nav link style — current section highlight use bg-accent instead of only bold
 const navLinkClass = (item, { block = false } = {}) => {
   const base = 'rounded-md px-3 py-1.5 text-sm font-medium no-underline cursor-pointer transition-colors';
@@ -279,7 +381,22 @@ const scrollToSection = (el, offset = 70) => {
   window.scrollTo({ top: y, behavior: 'smooth' });
 };
 
-watch(() => store.allHasLoaded, (newValue) => { loaded.value = newValue; });
+// Open a tool from the nav: scroll to the Advanced Tools section, then raise the
+// drawer (driven by the `?tool=` query Advanced.vue watches). Scrolls twice — the
+// mobile nav Sheet locks body scroll until it closes, so the first scroll is a
+// no-op there and the deferred one lands after the Sheet is gone.
+let openToolTimer = null;
+const openTool = (slug) => {
+  store.setOpenSheet(null);            // close the mobile nav Sheet (no-op on desktop)
+  scrollToSection('AdvancedTools');
+  clearTimeout(openToolTimer);
+  openToolTimer = setTimeout(() => {
+    scrollToSection('AdvancedTools');
+    router.push({ path: '/', query: { tool: slug } });
+  }, 300);
+  const name = slug.charAt(0).toUpperCase() + slug.slice(1);
+  trackEvent('Nav', 'NavClick', name);
+};
 
 // Mobile: hide nav on scroll-down, show on scroll-up.
 // SCROLL_DELTA filters out micro-jitter; SHOW_AT_TOP forces the nav
@@ -327,10 +444,12 @@ onMounted(() => {
     lastScrollY = window.scrollY;
     window.addEventListener('scroll', onScroll, { passive: true });
   }
+  fetchGithubStars();
 });
 
 onBeforeUnmount(() => {
   window.removeEventListener('scroll', onScroll);
+  clearTimeout(openToolTimer);
 });
 
 defineExpose({ OpenPreferences });
diff --git a/frontend/components/PrivacyPolicy.vue b/frontend/components/PrivacyPolicy.vue
new file mode 100644
index 000000000..6fdbcb3a8
--- /dev/null
+++ b/frontend/components/PrivacyPolicy.vue
@@ -0,0 +1,139 @@
+<template>
+  <!-- Standalone privacy page at /privacy (shareable + crawlable) -->
+  <div class="flex min-h-screen flex-col">
+    <!-- Slim header (shared with the standalone tool pages). -->
+    <StandalonePageHeader :title="t('about.Privacy')" />
+
+    <!-- Content -->
+    <main class="flex-1">
+      <!-- Brief loading state while the locale pack is fetched on first paint. -->
+      <div v-if="!ready" class="flex justify-center py-20">
+        <Spinner />
+      </div>
+
+      <article v-else class="mx-auto w-full max-w-[760px] px-4 md:px-6 py-8">
+        <h1 class="mb-1 text-2xl md:text-3xl font-semibold tracking-tight">{{ t('privacy.Title') }}</h1>
+        <p class="mb-6 text-xs text-muted-foreground">{{ t('privacy.UpdatedLabel') }}: {{ LAST_UPDATED }}</p>
+
+        <p class="mb-8 leading-relaxed text-foreground/90">{{ t('privacy.Intro') }}</p>
+
+        <!-- Sections are driven by `order` (computed from the feature flags).
+             Each id maps to a privacy.sections.<id> block; paragraphs() and
+             bullets() pull the arrays via tm() and resolve them with rt(). -->
+        <section v-for="id in order" :key="id" class="mb-8">
+          <h2 class="mb-2 text-lg font-semibold">{{ t(`privacy.sections.${id}.title`) }}</h2>
+          <p v-for="(p, i) in paragraphs(id)" :key="i" class="mb-2 leading-relaxed text-foreground/85">
+            {{ p }}
+          </p>
+          <ul v-if="bullets(id).length" class="mt-2 list-disc space-y-1.5 pl-5 text-foreground/85">
+            <li v-for="(b, i) in bullets(id)" :key="i" class="leading-relaxed">{{ b }}</li>
+          </ul>
+        </section>
+      </article>
+    </main>
+
+    <Footer />
+  </div>
+</template>
+
+<script setup>
+// Privacy page: assembles its sections from a feature-gated id list. The copy is
+// a separate locale pack so it stays out of the main language bundle and is
+// easier to maintain on its own.
+import { computed, ref, watch } from 'vue';
+import { useI18n } from 'vue-i18n';
+import { storeToRefs } from 'pinia';
+import { useMainStore } from '@/store';
+import { isAnalyticsEnabled } from '@/utils/analytics';
+import { useDocumentMeta } from '@/composables/use-document-meta.js';
+import Footer from '@/components/Footer.vue';
+import StandalonePageHeader from '@/components/StandalonePageHeader.vue';
+import { Spinner } from '@/components/ui/spinner';
+
+const { t, tm, rt, locale, mergeLocaleMessage } = useI18n();
+const store = useMainStore();
+const { isFireBaseSet } = storeToRefs(store);
+
+// Bump when the policy text changes materially.
+const LAST_UPDATED = '2026-06-28';
+
+// Privacy copy is loaded on demand per locale (mirrors the security-checklist
+// dataset pattern), then merged into i18n so t() / tm() can resolve it.
+const privacyLoaders = {
+  en: () => import('@/locales/privacy/en.json'),
+  zh: () => import('@/locales/privacy/zh.json'),
+  fr: () => import('@/locales/privacy/fr.json'),
+  tr: () => import('@/locales/privacy/tr.json'),
+};
+
+const loaded = new Set();
+const ready = ref(false);
+
+// Merge one locale's privacy copy into i18n (memoized). Does NOT touch `ready` —
+// the caller decides when to reveal, so a background fallback load can't race the
+// active locale and paint the wrong language.
+const loadPrivacy = async (loc) => {
+  if (loaded.has(loc)) return;
+  const load = privacyLoaders[loc] || privacyLoaders.en;
+  const { default: msgs } = await load();
+  mergeLocaleMessage(loc, msgs);
+  loaded.add(loc);
+};
+
+// Reveal only after the ACTIVE locale's copy is merged — otherwise the en
+// fallback load could resolve first and paint English (t() falling back) until
+// the next re-render. The en fallback (covering any key the active locale might
+// miss) loads in the background and doesn't gate the reveal.
+watch(locale, async (loc) => {
+  ready.value = false;
+  await loadPrivacy(loc);
+  if (loc === locale.value) ready.value = true; // ignore a stale load if locale changed mid-flight
+  if (loc !== 'en') loadPrivacy('en');
+}, { immediate: true });
+
+// Ordered section ids, gated on which collection actually happens here. The
+// "why" section explains the reason for whichever collection is active.
+const order = computed(() => {
+  const ids = ['tools'];
+  if (isAnalyticsEnabled) ids.push('analytics');
+  if (isFireBaseSet.value) ids.push('account');
+  if (isAnalyticsEnabled || isFireBaseSet.value) ids.push('why');
+  ids.push('cookies');
+  if (isAnalyticsEnabled) ids.push('eu');
+  return ids;
+});
+
+// Resolve a section's paragraphs to display strings. Two sections are assembled
+// per-flag rather than from a fixed array: "why" carries a reason per collection
+// type, and "cookies" mentions the GA cookie only when analytics is on.
+const paragraphs = (id) => {
+  if (id === 'why') {
+    const out = [];
+    if (isAnalyticsEnabled) out.push(t('privacy.sections.why.analytics'));
+    if (isFireBaseSet.value) out.push(t('privacy.sections.why.account'));
+    return out;
+  }
+  if (id === 'cookies') {
+    const out = [];
+    if (isAnalyticsEnabled) out.push(t('privacy.sections.cookies.analytics'));
+    out.push(t('privacy.sections.cookies.local'));
+    return out;
+  }
+  const arr = tm(`privacy.sections.${id}.paragraphs`);
+  return Array.isArray(arr) ? arr.map(rt) : [];
+};
+
+const bullets = (id) => {
+  const arr = tm(`privacy.sections.${id}.bullets`);
+  return Array.isArray(arr) ? arr.map(rt) : [];
+};
+
+// Page head: localized title + description, self-referential canonical. Title
+// uses the always-loaded about.Privacy key; the description (from the on-demand
+// pack) fills in once ready — watchEffect re-runs when it loads.
+useDocumentMeta(() => ({
+  title: `${t('about.Privacy')} · IPCheck.ing`,
+  description: ready.value ? t('privacy.Intro') : '',
+  canonical: `${window.location.origin}/privacy`,
+}));
+</script>
diff --git a/frontend/components/StandalonePageHeader.vue b/frontend/components/StandalonePageHeader.vue
new file mode 100644
index 000000000..eb94f9095
--- /dev/null
+++ b/frontend/components/StandalonePageHeader.vue
@@ -0,0 +1,49 @@
+<template>
+  <!-- Slim sticky header shared by the standalone pages (/tools/:slug and
+       /privacy). Brand → home, an optional breadcrumb title, and a back-to-home
+       button. This is NOT the homepage nav (Nav.vue) — that one carries the full
+       navigation, user menu, and mobile drawer; this is the minimal page chrome
+       those standalone layouts wrap their content in. -->
+  <header class="sticky top-0 z-40 border-b bg-background/80 supports-[backdrop-filter:blur(0px)]:bg-background/60 backdrop-blur">
+    <div class="mx-auto flex w-full max-w-[1600px] items-center gap-2 px-4 h-14">
+      <RouterLink to="/"
+        class="inline-flex items-center gap-1.5 rounded-md px-1 py-1 text-lg font-semibold text-foreground no-underline hover:opacity-80 transition-opacity"
+        aria-label="IPCheck.ing">
+        <brandIcon />
+        <span class="tracking-tight">
+          <span class="font-bold">IP</span><span class="font-extralight">Check.</span><span
+            class="font-extralight">ing</span>
+        </span>
+      </RouterLink>
+      <!-- Breadcrumb: " / <title>" — only when the page passes a title. -->
+      <template v-if="title">
+        <span class="text-muted-foreground" aria-hidden="true">/</span>
+        <span class="min-w-0 truncate font-medium">{{ title }}</span>
+      </template>
+      <!-- Button `as-child` renders the RouterLink as its root, so this is a
+           single <a> styled as a button — not a <button> nested in an <a>. -->
+      <Button as-child variant="default" class="ml-auto shrink-0 cursor-pointer">
+        <RouterLink to="/">
+          <ArrowLeft class="size-4" /> {{ t('advancedtools.BackToHome') }}
+        </RouterLink>
+      </Button>
+    </div>
+  </header>
+</template>
+
+<script setup>
+// Shared slim header for standalone pages. The breadcrumb label is passed in as
+// `title` (already localized by the caller); everything else is fixed chrome.
+import { useI18n } from 'vue-i18n';
+import brandIcon from '@/components/svgicons/Brand.vue';
+import { ArrowLeft } from '@lucide/vue';
+import { Button } from '@/components/ui/button';
+
+defineProps({
+    // Breadcrumb text shown after the brand (e.g. "🌐 MTR Test" or "Privacy").
+    // Empty string renders just the brand + back button.
+    title: { type: String, default: '' },
+});
+
+const { t } = useI18n();
+</script>
diff --git a/frontend/components/StandaloneTool.vue b/frontend/components/StandaloneTool.vue
index d18927e25..fddb76761 100644
--- a/frontend/components/StandaloneTool.vue
+++ b/frontend/components/StandaloneTool.vue
@@ -4,31 +4,8 @@
        component the drawer does, just inside a minimal page chrome instead of
        the homepage + drawer. -->
   <div class="flex min-h-screen flex-col">
-    <!-- Slim header: brand → home, current tool, back link -->
-    <header class="sticky top-0 z-40 border-b bg-background/80 supports-[backdrop-filter:blur(0px)]:bg-background/60 backdrop-blur">
-      <div class="mx-auto flex w-full max-w-[1600px] items-center gap-2 px-4 h-14">
-        <RouterLink to="/"
-          class="inline-flex items-center gap-1.5 rounded-md px-1 py-1 text-lg font-semibold text-foreground no-underline hover:opacity-80 transition-opacity"
-          aria-label="IPCheck.ing">
-          <brandIcon />
-          <span class="tracking-tight">
-            <span class="font-bold">IP</span><span class="font-extralight">Check.</span><span
-              class="font-extralight">ing</span>
-          </span>
-        </RouterLink>
-        <template v-if="tool">
-          <span class="text-muted-foreground" aria-hidden="true">/</span>
-          <span class="min-w-0 truncate font-medium">{{ tool.emoji }} {{ t(tool.titleKey) }}</span>
-        </template>
-        <!-- Button `as-child` renders the RouterLink as its root, so this is a
-             single <a> styled as a button — not a <button> nested in an <a>. -->
-        <Button as-child variant="default" class="ml-auto shrink-0 cursor-pointer">
-          <RouterLink to="/">
-            <ArrowLeft class="size-4" /> {{ t('advancedtools.BackToHome') }}
-          </RouterLink>
-        </Button>
-      </div>
-    </header>
+    <!-- Slim header: brand → home, current tool breadcrumb, back link. -->
+    <StandalonePageHeader :title="tool ? `${tool.emoji} ${t(tool.titleKey)}` : ''" />
 
     <!-- Content: an <h1> for the tool (SEO), then the tool body itself -->
     <main class="flex-1">
@@ -52,9 +29,7 @@ import { useI18n } from 'vue-i18n';
 import { TOOL_BY_SLUG } from '@/data/tools.js';
 import { useDocumentMeta } from '@/composables/use-document-meta.js';
 import Footer from '@/components/Footer.vue';
-import brandIcon from '@/components/svgicons/Brand.vue';
-import { ArrowLeft } from '@lucide/vue';
-import { Button } from '@/components/ui/button';
+import StandalonePageHeader from '@/components/StandalonePageHeader.vue';
 
 const { t } = useI18n();
 const route = useRoute();
@@ -65,12 +40,12 @@ const toolComponent = computed(() => (tool.value ? defineAsyncComponent(tool.val
 
 // Per-tool head: localized title + description, self-referential canonical.
 useDocumentMeta(() => {
-    if (!tool.value) return {};
-    return {
-        title: `${t(tool.value.titleKey)} · IPCheck.ing`,
-        description: t(tool.value.noteKey),
-        canonical: `${window.location.origin}/tools/${tool.value.slug}`,
-    };
+  if (!tool.value) return {};
+  return {
+    title: `${t(tool.value.titleKey)} · IPCheck.ing`,
+    description: t(tool.value.noteKey),
+    canonical: `${window.location.origin}/tools/${tool.value.slug}`,
+  };
 });
 
 // Unknown slug → bounce to the homepage rather than show an empty shell.
diff --git a/frontend/components/WebRtcTest.vue b/frontend/components/WebRtcTest.vue
index 7be3f0bfe..2da2b1754 100644
--- a/frontend/components/WebRtcTest.vue
+++ b/frontend/components/WebRtcTest.vue
@@ -46,7 +46,7 @@
               <span class="relative inline-flex size-2 rounded-full" :class="dotClass(toneOf(stun))"></span>
             </span>
             <FitText :text="stun.ip" :tiers="INLINE_TIERS" :title="stun.ip" class="font-mono min-w-0"
-              :class="textClass(toneOf(stun))" data-mask="ip" />
+              :class="textClass(toneOf(stun))" :data-mask="maskAttr(stun.ip)" />
           </div>
 
           <!-- NAT + ISP + Country -->
@@ -125,6 +125,7 @@ import { Button } from '@/components/ui/button';
 import { Card, CardContent } from '@/components/ui/card';
 import { Collapsible, CollapsibleTrigger, CollapsibleContent } from '@/components/ui/collapsible';
 import { useStatusTone, ipFieldTone, isFieldPending as isFieldPendingShared } from '@/composables/use-status-tone.js';
+import { createMaskGate } from '@/composables/use-info-mask.js';
 import { useMaxmind } from '@/composables/use-maxmind.js';
 import { Play, MapPin, EthernetPort, Flower, Network, RotateCw, FileText, ChevronDown } from '@lucide/vue';
 import { Icon } from '@iconify/vue';
@@ -135,6 +136,8 @@ import { INLINE_TIERS } from '@/composables/use-fit-text.js';
 const { t } = useI18n();
 const store = useMainStore();
 const userPreferences = computed(() => store.userPreferences);
+// Skip the info-mask blur on waiting/error placeholders (not a real IP).
+const maskAttr = createMaskGate(t);
 const isSimpleMode = computed(() => userPreferences.value.simpleMode);
 const { dotClass, textClass } = useStatusTone();
 const { lookupMaxmind } = useMaxmind();
diff --git a/frontend/components/advanced-tools/RuleTest.vue b/frontend/components/advanced-tools/RuleTest.vue
index 7e5bb0eb5..10d1cb880 100644
--- a/frontend/components/advanced-tools/RuleTest.vue
+++ b/frontend/components/advanced-tools/RuleTest.vue
@@ -19,7 +19,8 @@
                     </div>
 
                     <!-- URL (secondary information) -->
-                    <p v-if="test.url" class="w-full min-w-0 mb-1 text-xs font-mono text-muted-foreground truncate" :title="test.url">
+                    <p v-if="test.url" class="w-full min-w-0 mb-1 text-xs font-mono text-muted-foreground truncate"
+                        :title="test.url">
                         {{ test.url }}
                     </p>
 
@@ -31,8 +32,7 @@
                             <span class="relative inline-flex size-2 rounded-full"
                                 :class="dotClass(toneOf(test))"></span>
                         </span>
-                        <FitText :text="test.ip" :tiers="INLINE_TIERS" :title="test.ip"
-                            class="font-mono min-w-0"
+                        <FitText :text="test.ip" :tiers="INLINE_TIERS" :title="test.ip" class="font-mono min-w-0"
                             :class="textClass(toneOf(test))" />
                     </div>
 
@@ -207,7 +207,7 @@ const checkAchievements = () => {
 };
 
 onMounted(() => {
-    setTimeout(() => { checkAllRuleTest(); }, 1000);
+    setTimeout(() => { checkAllRuleTest(); }, 300);
 });
 
 watch(IPArray, () => {
diff --git a/frontend/components/ip-infos/IPCard.vue b/frontend/components/ip-infos/IPCard.vue
index 7fb3e08ff..95a6ab754 100644
--- a/frontend/components/ip-infos/IPCard.vue
+++ b/frontend/components/ip-infos/IPCard.vue
@@ -11,17 +11,13 @@
                 </span>
                 <span class="text-sm font-medium truncate">
                     <span class="text-muted-foreground">{{ t('ipInfos.Source') }}:
-                    {{ card.source }}</span>
+                        {{ card.source }}</span>
                 </span>
             </div>
             <div class="shrink-0 flex items-center gap-1" data-screenshot-exclude>
-                <ScreenshotButton
-                    filename-prefix="myip"
-                    :filename-label="card.source"
-                    :track-label="card.source || 'unknown'"
-                    :disabled="!hasData"
-                    :tooltip-text="t('Tooltips.SaveAsImage')"
-                    :aria-label="'Save ' + card.source + ' as image'" />
+                <ScreenshotButton filename-prefix="myip" :filename-label="card.source"
+                    :track-label="card.source || 'unknown'" :disabled="!hasData"
+                    :tooltip-text="t('Tooltips.SaveAsImage')" :aria-label="'Save ' + card.source + ' as image'" />
                 <JnTooltip :text="t('Tooltips.RefreshIPCard')" side="left">
                     <Button size="icon" variant="outline" class="size-8 cursor-pointer"
                         @click="$emit('refresh-card', card, index)" :aria-label="'Refresh ' + card.source">
@@ -37,18 +33,16 @@
                 <!-- Monitor is inline inside FitText so it rides the IP's
                     first line; Copy stays a flex sibling so ellipsis
                     never clips it. -->
-                <div class="px-4 py-3 flex items-start gap-2 min-w-0" data-mask="ip">
+                <div class="px-4 py-3 flex items-start gap-2 min-w-0" :data-mask="maskAttr(card.ip)">
                     <FitText :text="card.ip" :tiers="HERO_TIERS" :max-lines="2" :title="card.ip"
-                        class="font-mono font-semibold min-w-0 items-start"/>
-                    <CopyButton v-if="isValidIP(card.ip)" :value="card.ip"
-                        :tooltip="t('Tooltips.CopyIP')"
+                        class="font-mono font-semibold min-w-0 items-start" />
+                    <CopyButton v-if="isValidIP(card.ip)" :value="card.ip" :tooltip="t('Tooltips.CopyIP')"
                         :aria-label="'Copy ' + card.ip" />
                 </div>
 
                 <IpDetailPanel :data="card" :index="index" :ip-geo-source="ipGeoSource" :asn-infos="asnInfos"
                     :asn-history-infos="asnHistoryInfos" :asn-connectivity-infos="asnConnectivityInfos"
-                    :configs="configs" :is-dark-mode="isDarkMode"
-                    :enable-map="true" />
+                    :configs="configs" :is-dark-mode="isDarkMode" :enable-map="true" />
             </template>
 
             <!-- Error state -->
@@ -60,8 +54,8 @@
 
             <!-- Loading state: skeleton rows -->
             <div v-else class="flex-1 px-4 py-3 space-y-3">
-                <div v-for="(w, i) in placeholderSizes" :key="i" class="h-4 bg-muted rounded animate-pulse"
-                    :style="`width: ${(w / 12) * 100}%`"></div>
+                <div v-for="(w, i) in placeholderSizes.slice(0, ipGeoSource === 0 ? 12 : 7)" :key="i"
+                    class="h-4 bg-muted rounded animate-pulse" :style="`width: ${(w / 12) * 100}%`"></div>
             </div>
         </div>
     </Card>
@@ -73,6 +67,7 @@ import { useI18n } from 'vue-i18n';
 import { isValidIP } from '@/utils/valid-ip.js';
 import FitText from '@/components/widgets/FitText.vue';
 import { HERO_TIERS } from '@/composables/use-fit-text.js';
+import { createMaskGate } from '@/composables/use-info-mask.js';
 import IPErrorIcon from '../svgicons/IPError.vue';
 import IpDetailPanel from './IpDetailPanel.vue';
 import { JnTooltip } from '@/components/ui/tooltip';
@@ -85,8 +80,10 @@ import {
 } from '@lucide/vue';
 
 const { t } = useI18n();
+// Skip the info-mask blur on the IPv4/IPv6 error placeholders (not a real IP).
+const maskAttr = createMaskGate(t);
 
-const placeholderSizes = [12, 8, 6, 8, 4];
+const placeholderSizes = [12, 8, 6, 8, 4, 12, 8, 6, 2, 8, 4];
 
 const props = defineProps({
     card: { type: Object, required: true },
diff --git a/frontend/components/ui/navigation-menu/NavigationMenu.vue b/frontend/components/ui/navigation-menu/NavigationMenu.vue
new file mode 100644
index 000000000..72ebceff6
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenu.vue
@@ -0,0 +1,45 @@
+<script setup>
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuRoot, useForwardPropsEmits } from "reka-ui";
+import { cn } from "@/lib/utils";
+import NavigationMenuViewport from "./NavigationMenuViewport.vue";
+
+const props = defineProps({
+  modelValue: { type: String, required: false },
+  defaultValue: { type: String, required: false },
+  dir: { type: String, required: false },
+  orientation: { type: String, required: false },
+  delayDuration: { type: Number, required: false },
+  skipDelayDuration: { type: Number, required: false },
+  disableClickTrigger: { type: Boolean, required: false },
+  disableHoverTrigger: { type: Boolean, required: false },
+  disablePointerLeaveClose: { type: Boolean, required: false },
+  unmountOnHide: { type: Boolean, required: false },
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+  viewport: { type: Boolean, required: false, default: true },
+});
+const emits = defineEmits(["update:modelValue"]);
+
+const delegatedProps = reactiveOmit(props, "class", "viewport");
+const forwarded = useForwardPropsEmits(delegatedProps, emits);
+</script>
+
+<template>
+  <NavigationMenuRoot
+    v-slot="slotProps"
+    data-slot="navigation-menu"
+    :data-viewport="viewport"
+    v-bind="forwarded"
+    :class="
+      cn(
+        'group/navigation-menu relative flex max-w-max flex-1 items-center justify-center',
+        props.class,
+      )
+    "
+  >
+    <slot v-bind="slotProps" />
+    <NavigationMenuViewport v-if="viewport" />
+  </NavigationMenuRoot>
+</template>
diff --git a/frontend/components/ui/navigation-menu/NavigationMenuContent.vue b/frontend/components/ui/navigation-menu/NavigationMenuContent.vue
new file mode 100644
index 000000000..f3e71e0ae
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenuContent.vue
@@ -0,0 +1,39 @@
+<script setup>
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuContent, useForwardPropsEmits } from "reka-ui";
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  forceMount: { type: Boolean, required: false },
+  disableOutsidePointerEvents: { type: Boolean, required: false },
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+});
+const emits = defineEmits([
+  "escapeKeyDown",
+  "pointerDownOutside",
+  "focusOutside",
+  "interactOutside",
+]);
+
+const delegatedProps = reactiveOmit(props, "class");
+
+const forwarded = useForwardPropsEmits(delegatedProps, emits);
+</script>
+
+<template>
+  <NavigationMenuContent
+    data-slot="navigation-menu-content"
+    v-bind="forwarded"
+    :class="
+      cn(
+        'data-[motion^=from-]:animate-in data-[motion^=to-]:animate-out data-[motion^=from-]:fade-in data-[motion^=to-]:fade-out data-[motion=from-end]:slide-in-from-right-52 data-[motion=from-start]:slide-in-from-left-52 data-[motion=to-end]:slide-out-to-right-52 data-[motion=to-start]:slide-out-to-left-52 top-0 left-0 w-full p-2 pr-2.5 md:absolute md:w-auto',
+        'group-data-[viewport=false]/navigation-menu:bg-popover group-data-[viewport=false]/navigation-menu:text-popover-foreground group-data-[viewport=false]/navigation-menu:data-[state=open]:animate-in group-data-[viewport=false]/navigation-menu:data-[state=closed]:animate-out group-data-[viewport=false]/navigation-menu:data-[state=closed]:zoom-out-95 group-data-[viewport=false]/navigation-menu:data-[state=open]:zoom-in-95 group-data-[viewport=false]/navigation-menu:data-[state=open]:fade-in-0 group-data-[viewport=false]/navigation-menu:data-[state=closed]:fade-out-0 group-data-[viewport=false]/navigation-menu:top-full group-data-[viewport=false]/navigation-menu:mt-1.5 group-data-[viewport=false]/navigation-menu:overflow-hidden group-data-[viewport=false]/navigation-menu:rounded-md group-data-[viewport=false]/navigation-menu:border group-data-[viewport=false]/navigation-menu:shadow group-data-[viewport=false]/navigation-menu:duration-200 **:data-[slot=navigation-menu-link]:focus:ring-0 **:data-[slot=navigation-menu-link]:focus:outline-none',
+        props.class,
+      )
+    "
+  >
+    <slot />
+  </NavigationMenuContent>
+</template>
diff --git a/frontend/components/ui/navigation-menu/NavigationMenuIndicator.vue b/frontend/components/ui/navigation-menu/NavigationMenuIndicator.vue
new file mode 100644
index 000000000..f9a4e821f
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenuIndicator.vue
@@ -0,0 +1,33 @@
+<script setup>
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuIndicator, useForwardProps } from "reka-ui";
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  forceMount: { type: Boolean, required: false },
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+});
+
+const delegatedProps = reactiveOmit(props, "class");
+
+const forwardedProps = useForwardProps(delegatedProps);
+</script>
+
+<template>
+  <NavigationMenuIndicator
+    data-slot="navigation-menu-indicator"
+    v-bind="forwardedProps"
+    :class="
+      cn(
+        'data-[state=visible]:animate-in data-[state=hidden]:animate-out data-[state=hidden]:fade-out data-[state=visible]:fade-in top-full z-[1] flex h-1.5 items-end justify-center overflow-hidden',
+        props.class,
+      )
+    "
+  >
+    <div
+      class="bg-border relative top-[60%] h-2 w-2 rotate-45 rounded-tl-sm shadow-md"
+    />
+  </NavigationMenuIndicator>
+</template>
diff --git a/frontend/components/ui/navigation-menu/NavigationMenuItem.vue b/frontend/components/ui/navigation-menu/NavigationMenuItem.vue
new file mode 100644
index 000000000..9b978223b
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenuItem.vue
@@ -0,0 +1,24 @@
+<script setup>
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuItem } from "reka-ui";
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  value: { type: String, required: false },
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+});
+
+const delegatedProps = reactiveOmit(props, "class");
+</script>
+
+<template>
+  <NavigationMenuItem
+    data-slot="navigation-menu-item"
+    v-bind="delegatedProps"
+    :class="cn('relative', props.class)"
+  >
+    <slot />
+  </NavigationMenuItem>
+</template>
diff --git a/frontend/components/ui/navigation-menu/NavigationMenuLink.vue b/frontend/components/ui/navigation-menu/NavigationMenuLink.vue
new file mode 100644
index 000000000..1ccc546d7
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenuLink.vue
@@ -0,0 +1,31 @@
+<script setup>
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuLink, useForwardPropsEmits } from "reka-ui";
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  active: { type: Boolean, required: false },
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+});
+const emits = defineEmits(["select"]);
+
+const delegatedProps = reactiveOmit(props, "class");
+const forwarded = useForwardPropsEmits(delegatedProps, emits);
+</script>
+
+<template>
+  <NavigationMenuLink
+    data-slot="navigation-menu-link"
+    v-bind="forwarded"
+    :class="
+      cn(
+        'data-active:focus:bg-accent data-active:hover:bg-accent data-active:bg-accent/50 data-active:text-accent-foreground hover:bg-accent hover:text-accent-foreground focus:bg-accent focus:text-accent-foreground ring-ring/10 dark:ring-ring/20 dark:outline-ring/40 outline-ring/50 [&_svg:not([class*=\'text-\'])]:text-muted-foreground flex flex-col gap-1 rounded-sm p-2 text-sm transition-[color,box-shadow] focus-visible:ring-4 focus-visible:outline-1 [&_svg:not([class*=\'size-\'])]:size-4',
+        props.class,
+      )
+    "
+  >
+    <slot />
+  </NavigationMenuLink>
+</template>
diff --git a/frontend/components/ui/navigation-menu/NavigationMenuList.vue b/frontend/components/ui/navigation-menu/NavigationMenuList.vue
new file mode 100644
index 000000000..e5e9f51e6
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenuList.vue
@@ -0,0 +1,30 @@
+<script setup>
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuList, useForwardProps } from "reka-ui";
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+});
+
+const delegatedProps = reactiveOmit(props, "class");
+
+const forwardedProps = useForwardProps(delegatedProps);
+</script>
+
+<template>
+  <NavigationMenuList
+    data-slot="navigation-menu-list"
+    v-bind="forwardedProps"
+    :class="
+      cn(
+        'group flex flex-1 list-none items-center justify-center gap-1',
+        props.class,
+      )
+    "
+  >
+    <slot />
+  </NavigationMenuList>
+</template>
diff --git a/frontend/components/ui/navigation-menu/NavigationMenuTrigger.vue b/frontend/components/ui/navigation-menu/NavigationMenuTrigger.vue
new file mode 100644
index 000000000..ac6e0f339
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenuTrigger.vue
@@ -0,0 +1,32 @@
+<script setup>
+import { ChevronDown } from "@lucide/vue";
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuTrigger, useForwardProps } from "reka-ui";
+import { cn } from "@/lib/utils";
+import { navigationMenuTriggerStyle } from ".";
+
+const props = defineProps({
+  disabled: { type: Boolean, required: false },
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+});
+
+const delegatedProps = reactiveOmit(props, "class");
+
+const forwardedProps = useForwardProps(delegatedProps);
+</script>
+
+<template>
+  <NavigationMenuTrigger
+    data-slot="navigation-menu-trigger"
+    v-bind="forwardedProps"
+    :class="cn(navigationMenuTriggerStyle(), 'group', props.class)"
+  >
+    <slot />
+    <ChevronDown
+      class="relative top-px ml-1 size-3 transition duration-300 group-data-[state=open]:rotate-180"
+      aria-hidden="true"
+    />
+  </NavigationMenuTrigger>
+</template>
diff --git a/frontend/components/ui/navigation-menu/NavigationMenuViewport.vue b/frontend/components/ui/navigation-menu/NavigationMenuViewport.vue
new file mode 100644
index 000000000..124a7267e
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/NavigationMenuViewport.vue
@@ -0,0 +1,32 @@
+<script setup>
+import { reactiveOmit } from "@vueuse/core";
+import { NavigationMenuViewport, useForwardProps } from "reka-ui";
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  forceMount: { type: Boolean, required: false },
+  align: { type: String, required: false },
+  asChild: { type: Boolean, required: false },
+  as: { type: null, required: false },
+  class: { type: null, required: false },
+});
+
+const delegatedProps = reactiveOmit(props, "class");
+
+const forwardedProps = useForwardProps(delegatedProps);
+</script>
+
+<template>
+  <div class="absolute top-full left-0 isolate z-50 flex justify-center">
+    <NavigationMenuViewport
+      data-slot="navigation-menu-viewport"
+      v-bind="forwardedProps"
+      :class="
+        cn(
+          'origin-top-center bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-90 relative mt-1.5 h-[var(--reka-navigation-menu-viewport-height)] w-full overflow-hidden rounded-md border shadow md:w-[var(--reka-navigation-menu-viewport-width)] left-[var(--reka-navigation-menu-viewport-left)]',
+          props.class,
+        )
+      "
+    />
+  </div>
+</template>
diff --git a/frontend/components/ui/navigation-menu/index.js b/frontend/components/ui/navigation-menu/index.js
new file mode 100644
index 000000000..729de13f7
--- /dev/null
+++ b/frontend/components/ui/navigation-menu/index.js
@@ -0,0 +1,14 @@
+import { cva } from "class-variance-authority";
+
+export { default as NavigationMenu } from "./NavigationMenu.vue";
+export { default as NavigationMenuContent } from "./NavigationMenuContent.vue";
+export { default as NavigationMenuIndicator } from "./NavigationMenuIndicator.vue";
+export { default as NavigationMenuItem } from "./NavigationMenuItem.vue";
+export { default as NavigationMenuLink } from "./NavigationMenuLink.vue";
+export { default as NavigationMenuList } from "./NavigationMenuList.vue";
+export { default as NavigationMenuTrigger } from "./NavigationMenuTrigger.vue";
+export { default as NavigationMenuViewport } from "./NavigationMenuViewport.vue";
+
+export const navigationMenuTriggerStyle = cva(
+  "group inline-flex h-9 w-max items-center justify-center rounded-md bg-background px-4 py-2 text-sm font-medium hover:bg-accent hover:text-accent-foreground focus:bg-accent focus:text-accent-foreground disabled:pointer-events-none disabled:opacity-50 data-[state=open]:hover:bg-accent data-[state=open]:text-accent-foreground data-[state=open]:focus:bg-accent data-[state=open]:bg-accent/50 focus-visible:ring-ring/50 outline-none transition-[color,box-shadow] focus-visible:ring-3 focus-visible:outline-1",
+);
diff --git a/frontend/components/widgets/Help.vue b/frontend/components/widgets/Help.vue
index 00a52621b..96ebd13af 100644
--- a/frontend/components/widgets/Help.vue
+++ b/frontend/components/widgets/Help.vue
@@ -1,6 +1,6 @@
 <template>
     <Dialog :open="isOpen" @update:open="isOpen = $event">
-        <DialogContent :title="t('helpModal.Title')" class="max-w-2xl">
+        <DialogContent :title="t('helpModal.Title')" class="max-w-4xl">
             <DialogHeader :icon="Keyboard" :title="t('helpModal.Title')" />
 
             <div class="space-y-4">
@@ -9,8 +9,8 @@
                     <span>{{ t('shortcutKeys.HelpNote') }}</span>
                 </p>
 
-                <!-- 2 column shortcut list -->
-                <div class="grid grid-cols-1 sm:grid-cols-2 gap-x-4 gap-y-1">
+                <!-- Multi-column shortcut list -->
+                <div class="grid grid-cols-2 md:grid-cols-3  gap-x-6 gap-y-1">
                     <div v-for="key in keyMap" :key="key.keys"
                         class="flex items-center justify-between gap-3 py-2 border-b last:border-b-0">
                         <span class="text-sm">{{ key.description }}</span>
diff --git a/frontend/components/widgets/Preferences.vue b/frontend/components/widgets/Preferences.vue
index 03aad8aab..0a6f9e897 100644
--- a/frontend/components/widgets/Preferences.vue
+++ b/frontend/components/widgets/Preferences.vue
@@ -6,7 +6,7 @@
             <!-- Header -->
             <header class="flex items-center justify-between gap-2 px-4 py-3 border-b shrink-0">
                 <h2 class="flex items-center gap-2 text-base font-semibold m-0">
-                    <SlidersHorizontal class="size-4 text-muted-foreground" />
+                    <Cog class="size-4 text-muted-foreground" />
                     {{ t('nav.preferences.title') }}
                 </h2>
                 <SheetClose
@@ -92,29 +92,46 @@
                     <SectionTip>{{ t('nav.preferences.ipDBTips') }}</SectionTip>
                 </section>
 
+                <!-- Auto Run on Startup — per-module switches only. IP info always
+                     runs (no switch). The Connectivity test options live in App
+                     Settings below: they apply to manual runs too, not just startup. -->
+                <section id="Pref_autoRun">
+                    <SectionTitle :icon="Play">{{ t('nav.preferences.autoRun') }}</SectionTitle>
+                    <div class="rounded-lg border bg-card divide-y">
+                        <PrefRow id="autoRunConnectivity" :label="t('nav.Connectivity')"
+                            :model-value="userPreferences.autoRunConnectivity"
+                            @update:model-value="(v) => prefAutoRun('autoRunConnectivity', v)" />
+
+                        <PrefRow id="autoRunWebRTC" :label="t('nav.WebRTC')"
+                            :model-value="userPreferences.autoRunWebRTC"
+                            @update:model-value="(v) => prefAutoRun('autoRunWebRTC', v)" />
+
+                        <PrefRow id="autoRunDnsLeak" :label="t('nav.DNSLeakTest')"
+                            :model-value="userPreferences.autoRunDnsLeak"
+                            @update:model-value="(v) => prefAutoRun('autoRunDnsLeak', v)" />
+                    </div>
+                    <SectionTip>{{ t('nav.preferences.autoRunTips') }}</SectionTip>
+                </section>
+
                 <!-- App Settings -->
                 <section id="Pref_appSettings">
                     <SectionTitle :icon="AppWindow">{{ t('nav.preferences.appSettings') }}</SectionTitle>
                     <div class="rounded-lg border bg-card divide-y">
-                        <PrefRow id="autoStart" :label="t('nav.preferences.autoRun')"
-                            :tip="t('nav.preferences.autoRunTips')" :model-value="userPreferences.autoStart"
-                            @update:model-value="prefAutoStart" />
-
-                        <PrefRow v-if="userPreferences.autoStart" id="ConnectivityMultipleTests"
+                        <PrefRow id="ConnectivityMultipleTests"
                             :label="t('nav.preferences.connectivityMultipleTests')"
                             :tip="t('nav.preferences.connectivityMultipleTestsTips')"
                             :model-value="userPreferences.connectivityMultipleTests"
                             @update:model-value="prefConnectivityMultipleTests" />
 
-                        <PrefRow id="simpleMode" :label="t('nav.preferences.simpleMode')"
-                            :tip="t('nav.preferences.simpleModeTips')" :model-value="userPreferences.simpleMode"
-                            @update:model-value="prefSimpleMode" />
-
                         <PrefRow id="ConnectivityNotifications"
                             :label="t('nav.preferences.popupConnectivityNotifications')"
                             :tip="t('nav.preferences.popupConnectivityNotificationsTips')"
                             :model-value="userPreferences.popupConnectivityNotifications"
                             @update:model-value="prefconnectivityShowNoti" />
+
+                        <PrefRow id="simpleMode" :label="t('nav.preferences.simpleMode')"
+                            :tip="t('nav.preferences.simpleModeTips')" :model-value="userPreferences.simpleMode"
+                            @update:model-value="prefSimpleMode" />
                     </div>
                 </section>
             </div>
@@ -141,7 +158,8 @@ import {
     LayoutGrid,
     Moon,
     Palette,
-    SlidersHorizontal,
+    Play,
+    Cog,
     Sun,
 } from '@lucide/vue';
 
@@ -215,10 +233,14 @@ const prefSimpleMode = (value) => {
     trackEvent('Nav', 'PrefereceClick', 'SimpleMode');
 };
 
-const prefAutoStart = (value) => {
-    store.updatePreference('autoStart', value);
-    trackEvent('Nav', 'PrefereceClick', 'AutoStart');
-    if (isSignedIn.value && !value && !store.userAchievements.EnergySaver.achieved) {
+// Per-module startup auto-run toggle. EnergySaver is earned once every auto-run
+// module is off.
+const prefAutoRun = (key, value) => {
+    store.updatePreference(key, value);
+    trackEvent('Nav', 'PrefereceClick', key);
+    const prefs = userPreferences.value;
+    const allOff = !prefs.autoRunConnectivity && !prefs.autoRunWebRTC && !prefs.autoRunDnsLeak;
+    if (isSignedIn.value && allOff && !store.userAchievements.EnergySaver.achieved) {
         store.setTriggerUpdateAchievements('EnergySaver');
     }
 };
@@ -256,7 +278,7 @@ SectionTitle.props = ['icon'];
 const SectionTip = (props, { slots }) =>
     h('p', { class: 'mt-2 text-xs text-muted-foreground leading-relaxed' }, slots.default?.());
 
-// App Settings switch row: label + tip on left, Switch on right
+// App Settings switch row: label (+ optional tip) on left, Switch on right.
 const PrefRow = (props, { emit }) =>
     h('div', { class: 'flex items-start justify-between gap-3 p-3' }, [
         h('div', { class: 'flex-1 min-w-0' }, [
@@ -264,7 +286,9 @@ const PrefRow = (props, { emit }) =>
                 for: props.id,
                 class: 'text-sm font-medium cursor-pointer select-none',
             }, props.label),
-            h('p', { class: 'mt-0.5 text-xs text-muted-foreground leading-relaxed' }, props.tip),
+            props.tip
+                ? h('p', { class: 'mt-0.5 text-xs text-muted-foreground leading-relaxed' }, props.tip)
+                : null,
         ]),
         h(Switch, {
             id: props.id,
diff --git a/frontend/composables/use-info-mask.js b/frontend/composables/use-info-mask.js
index 92b8c322e..9f460f239 100644
--- a/frontend/composables/use-info-mask.js
+++ b/frontend/composables/use-info-mask.js
@@ -20,6 +20,24 @@ import { trackEvent } from '../utils/analytics.js';
 
 const MASK_ATTR = 'data-mask-level';
 
+// Localized placeholder strings shown in an IP slot that are never sensitive —
+// "detecting…" / "error" states. The blur should skip these: masking them just
+// hides a status word and looks broken in a shared screenshot.
+const NON_SENSITIVE_KEYS = [
+    'webrtc.StatusWait', 'webrtc.StatusError',
+    'dnsleaktest.StatusWait', 'dnsleaktest.StatusError',
+    'ipInfos.IPv4Error', 'ipInfos.IPv6Error',
+];
+
+// Build a `:data-mask` gate. Pass the component's i18n `t`; the returned fn maps
+// a displayed value to the attribute: 'ip' to blur a real address, or undefined
+// to leave waiting/error placeholders readable. Locale is fixed per page load
+// (switching language re-boots the app), so the placeholder set is built once.
+export function createMaskGate(t) {
+    const placeholders = new Set(NON_SENSITIVE_KEYS.map((key) => t(key)));
+    return (value) => (placeholders.has(value) ? undefined : 'ip');
+}
+
 const syncMaskAttribute = (level) => {
     if (typeof document === 'undefined') return;
     if (level === 0) {
diff --git a/frontend/composables/use-refresh-orchestrator.js b/frontend/composables/use-refresh-orchestrator.js
index 6c91c32b8..c4e766f28 100644
--- a/frontend/composables/use-refresh-orchestrator.js
+++ b/frontend/composables/use-refresh-orchestrator.js
@@ -43,7 +43,7 @@ export function useRefreshOrchestrator({ refs, store, t, userPreferences, infoMa
         const { IPCheckRef, connectivityRef, webRTCRef, dnsLeaksRef } = refs;
         scheduleTimedTasks([
             { action: () => IPCheckRef.value.checkAllIPs(), delay: 0 },
-            { action: () => connectivityRef.value.handelCheckStart(true), delay: 300 },
+            { action: () => connectivityRef.value.handelCheckStart('refresh'), delay: 300 },
             { action: () => webRTCRef.value.checkAllWebRTC(true), delay: 200 },
             { action: () => dnsLeaksRef.value.checkAllDNSLeakTest(true), delay: 100 },
             { action: () => refreshingAlert(), delay: 300 },
@@ -56,14 +56,25 @@ export function useRefreshOrchestrator({ refs, store, t, userPreferences, infoMa
         const { IPCheckRef, connectivityRef, webRTCRef, dnsLeaksRef } = refs;
         const mountedStatus = Object.values(store.mountingStatus).every(Boolean);
         if (mountedStatus) {
+            const prefs = userPreferences.value;
+            // IP info always runs on load — it has no per-module switch by design.
             setTimeout(() => IPCheckRef.value.checkAllIPs(), t1);
-            if (userPreferences.value.autoStart) {
+            // Each remaining module runs only if its switch is on; when off we
+            // flag it loaded immediately so allHasLoaded still resolves — it gates
+            // the info-mask button, the user-info fetch, and the brand shimmer.
+            if (prefs.autoRunConnectivity) {
                 setTimeout(() => connectivityRef.value.handelCheckStart(), t2);
-                setTimeout(() => webRTCRef.value.checkAllWebRTC(false), t3);
-                setTimeout(() => dnsLeaksRef.value.checkAllDNSLeakTest(false), t4);
             } else {
                 store.setLoadingStatus('Connectivity', true);
+            }
+            if (prefs.autoRunWebRTC) {
+                setTimeout(() => webRTCRef.value.checkAllWebRTC(false), t3);
+            } else {
                 store.setLoadingStatus('WebRTC', true);
+            }
+            if (prefs.autoRunDnsLeak) {
+                setTimeout(() => dnsLeaksRef.value.checkAllDNSLeakTest(false), t4);
+            } else {
                 store.setLoadingStatus('DNSLeakTest', true);
             }
         } else {
diff --git a/frontend/composables/use-shortcuts.js b/frontend/composables/use-shortcuts.js
index 2750f9b12..40a56a7b1 100644
--- a/frontend/composables/use-shortcuts.js
+++ b/frontend/composables/use-shortcuts.js
@@ -113,7 +113,7 @@ function buildShortcutConfig({ refs, store, t, configs, userPreferences, isSigne
             keys: 'c',
             action: () => {
                 scrollToElement('Connectivity', 80);
-                connectivityRef.value.handelCheckStart(true);
+                connectivityRef.value.handelCheckStart('manual');
                 trackEvent('ShortCut', 'ShortCut', 'Connectivity');
             },
             description: t('shortcutKeys.RefreshConnectivityTests'),
diff --git a/frontend/data/changelog.json b/frontend/data/changelog.json
index 1954c3c7e..77698cf23 100644
--- a/frontend/data/changelog.json
+++ b/frontend/data/changelog.json
@@ -1267,5 +1267,56 @@
         }
       }
     ]
+  },
+  {
+    "version": "v6.6.0",
+    "date": "July 1, 2026",
+    "content": [
+      {
+        "type": "add",
+        "change": {
+          "en": "Network Connectivity Test can now be set to multiple refreshes and display the minimum latency value",
+          "zh": "网络连通性测试可以设置多次刷新，并显示最小延迟值",
+          "fr": "Le test de connectivité réseau peut maintenant être configuré pour plusieurs rafraîchissements et afficher la valeur de latence minimale",
+          "tr": "Ağ bağlantı testi birden fazla yenileme ayarlanabilir ve minimum gecikme değeri görüntülenebilir"
+        }
+      },
+      {
+        "type": "add",
+        "change": {
+          "en": "Added Privacy Policy page",
+          "zh": "新增隐私政策页面",
+          "fr": "Ajout de la page Politique de confidentialité",
+          "tr": "Gizlilik Politikası sayfası eklendi"
+        }
+      },
+      {
+        "type": "improve",
+        "change": {
+          "en": "Navigation bar now shows all advanced tools",
+          "zh": "导航栏展示所有高级工具的入口",
+          "fr": "La barre de navigation affiche désormais tous les outils avancés",
+          "tr": "Navigasyon çubuğu artık tüm gelişmiş araçları gösterir"
+        }
+      },
+      {
+        "type": "improve",
+        "change": {
+          "en": "All modules on the homepage can now be individually controlled whether to run automatically",
+          "zh": "首页的所有模块现在可以单独控制是否自动运行",
+          "fr": "Tous les modules de la page d'accueil peuvent maintenant être contrôlés individuellement pour déterminer s'ils doivent être exécutés automatiquement",
+          "tr": "Ana sayfanın tüm modülleri artık bireysel olarak otomatik çalıştırılıp çalıştırılmayacağı kontrol edilebilir"
+        }
+      },
+      {
+        "type": "fix",
+        "change": {
+          "en": "Fixed some issues",
+          "zh": "修复一些问题",
+          "fr": "Correction de petits problèmes",
+          "tr": "Birkaç küçük sorun düzeltildi"
+        }
+      }
+    ]
   }
 ]
\ No newline at end of file
diff --git a/frontend/data/default-preferences.js b/frontend/data/default-preferences.js
index ca08b9988..605fb4159 100644
--- a/frontend/data/default-preferences.js
+++ b/frontend/data/default-preferences.js
@@ -3,11 +3,21 @@
 // When userPreferences key is missing or missing fields in localStorage, use this default value as fallback.
 // store.loadPreferences() will merge localStorage override values.
 
+// Versioned localStorage key for userPreferences; bump the suffix when stored
+// values shouldn't merge onto a changed default. Shared with locales/i18n.js
+// (which reads the active language from storage at boot) so the key can't drift.
+export const PREFS_STORAGE_KEY = 'userPreferences_v7';
+export const LEGACY_PREFS_KEYS = ['userPreferences_v6', 'userPreferences'];
+
 export const DEFAULT_PREFERENCES = Object.freeze({
   theme: 'auto', // auto | light | dark
   connectivityMultipleTests: false,
   simpleMode: false,
-  autoStart: true,
+  // Per-module startup auto-run switches. IP info has no switch — it always
+  // runs on load. See use-refresh-orchestrator.js.
+  autoRunConnectivity: true,
+  autoRunWebRTC: true,
+  autoRunDnsLeak: true,
   popupConnectivityNotifications: false,
   ipCardsToShow: 2,
   ipGeoSource: 0,
@@ -25,3 +35,23 @@ export const DEFAULT_PREFERENCES = Object.freeze({
 export function createDefaultPreferences() {
   return { ...DEFAULT_PREFERENCES };
 }
+
+/**
+ * Map a legacy preferences object onto the current schema: expand the single
+ * `autoStart` switch into the three per-module switches, pass everything else
+ * through. Pure — store.js does the localStorage read.
+ *
+ * @param {object|null} legacy parsed legacy preferences (or null/undefined)
+ * @returns {object} a writable object ready to spread over the defaults
+ */
+export function migrateLegacyPreferences(legacy) {
+  if (!legacy || typeof legacy !== 'object') return {};
+  const migrated = { ...legacy };
+  if (typeof legacy.autoStart === 'boolean') {
+    migrated.autoRunConnectivity = legacy.autoStart;
+    migrated.autoRunWebRTC = legacy.autoStart;
+    migrated.autoRunDnsLeak = legacy.autoStart;
+  }
+  delete migrated.autoStart;
+  return migrated;
+}
diff --git a/frontend/locales/en.json b/frontend/locales/en.json
index c28ec4ac4..29627ba41 100644
--- a/frontend/locales/en.json
+++ b/frontend/locales/en.json
@@ -160,7 +160,7 @@
       "ipSourcesToCheckTips": "Select the number of servers to check your IP address. The more servers you select, the more time it will take to complete the check.",
       "appSettings": "Program Settings",
       "autoRun": "Auto Run",
-      "autoRunTips": "If disabled, the app will only check the local IP and will not run tests automatically.",
+      "autoRunTips": "IP info is always checked when the page loads. Choose which other modules run automatically on startup.",
       "simpleMode": "Simple Mode",
       "simpleModeTips": "Hide the description text of each module, suitable for users who are already familiar with the application.",
       "connectivityMultipleTests": "Multiple Connectivity Refreshes",
@@ -841,9 +841,10 @@
     "contact": "If you have any questions or suggestions, please contact me via email: jason[AT]kenengba.com.",
     "personal": "Personal Website",
     "blog": "My Blog",
-    "retiremoney": "Future Planner",
+    "linkedIn": "LinkedIn",
     "twitter": "Twitter",
-    "Sponsor": "Sponsor"
+    "Sponsor": "Sponsor Us",
+    "Privacy": "Privacy"
   },
   "specialthanks": {
     "Title": "Special Thanks",
diff --git a/frontend/locales/fr.json b/frontend/locales/fr.json
index 7210d53d2..aef878e5e 100644
--- a/frontend/locales/fr.json
+++ b/frontend/locales/fr.json
@@ -160,7 +160,7 @@
       "ipSourcesToCheckTips": "Sélectionnez le nombre de serveurs pour vérifier votre adresse IP. Plus vous en sélectionnez, plus cela prendra de temps pour terminer la vérification.",
       "appSettings": "Paramètres de l'App",
       "autoRun": "Exécution Automatique",
-      "autoRunTips": "Si désactivé, l'appli vérifiera seulement l'IP local et n'exécutera pas de tests automatiquement.",
+      "autoRunTips": "Les infos IP sont toujours vérifiées au chargement de la page. Choisissez quels autres modules s'exécutent automatiquement au démarrage.",
       "simpleMode": "Mode Simple",
       "simpleModeTips": "Masque le texte de description de chaque module. Effectif uniquement sur les appareils mobiles.",
       "connectivityMultipleTests": "Rafraîchissements Multiples de Connectivité",
@@ -841,9 +841,10 @@
     "contact": "Si vous avez des questions ou des suggestions, veuillez me contacter par email : jason[AT]kenengba.com.",
     "personal": "Site personnel",
     "blog": "Mon blog",
-    "retiremoney": "Planificateur futur",
+    "linkedIn": "LinkedIn",
     "twitter": "Twitter",
-    "Sponsor": "Sponsor"
+    "Sponsor": "Nous soutenir",
+    "Privacy": "Confidentialité"
   },
   "specialthanks": {
     "Title": "Merci spécial",
diff --git a/frontend/locales/i18n.js b/frontend/locales/i18n.js
index 58a98d335..0c32dded7 100644
--- a/frontend/locales/i18n.js
+++ b/frontend/locales/i18n.js
@@ -1,4 +1,5 @@
 import { createI18n } from 'vue-i18n';
+import { PREFS_STORAGE_KEY, LEGACY_PREFS_KEYS } from '../data/default-preferences.js';
 
 // Locale messages are loaded on demand so the first-paint path carries only the
 // language actually in use. Bundling all four eagerly cost ~44 KB gzipped of dead
@@ -19,18 +20,28 @@ const localeLoaders = {
 const supportedLanguages = Object.keys(localeLoaders);
 const FALLBACK_LOCALE = 'en';
 
+// Read the saved language from localStorage, trying the current prefs key then
+// the legacy ones (so a freshly bumped key still finds the choice before
+// loadPreferences migrates it). Keys come from default-preferences.js so they
+// stay in step with what store.js writes.
+function readStoredLang() {
+  for (const key of [PREFS_STORAGE_KEY, ...LEGACY_PREFS_KEYS]) {
+    const raw = localStorage.getItem(key);
+    if (!raw) continue;
+    try {
+      const prefs = JSON.parse(raw);
+      if (supportedLanguages.includes(prefs?.lang)) return prefs.lang;
+    } catch { /* ignore malformed entry, try the next key */ }
+  }
+  return null;
+}
+
 // 设置语言
 function setLanguage() {
+  const storedLang = readStoredLang();
+  if (storedLang) return storedLang;
+
   let locale = 'en';
-  // Keep in sync with PREFS_STORAGE_KEY in frontend/store.js — both must read
-  // from the same versioned key so an old value doesn't mislead the i18n
-  // initialization into a previously-chosen language after we bumped defaults.
-  let storedPreferences = localStorage.getItem('userPreferences_v6');
-  storedPreferences = storedPreferences ? JSON.parse(storedPreferences) : {};
-  if (supportedLanguages.includes(storedPreferences.lang)) {
-    locale = storedPreferences.lang;
-    return locale;
-  }
   const searchParams = new URLSearchParams(window.location.search);
   const browserLanguage = navigator.language || navigator.userLanguage;
   const hl = searchParams.get('hl');
diff --git a/frontend/locales/privacy/en.json b/frontend/locales/privacy/en.json
new file mode 100644
index 000000000..f7cac9b1a
--- /dev/null
+++ b/frontend/locales/privacy/en.json
@@ -0,0 +1,60 @@
+{
+  "privacy": {
+    "Title": "Privacy Policy",
+    "UpdatedLabel": "Last updated",
+    "Intro": "IPCheck.ing is a free, open-source IP toolbox. We built it to help you see what your network and browser reveal about you, so respecting your own privacy matters to us. This page explains what happens to your data when you use the site.",
+    "sections": {
+      "tools": {
+        "title": "How the tools work",
+        "paragraphs": [
+          "Most of what the tools show you — your IP details, browser fingerprint, DNS, connectivity and speed-test results — is computed in your browser or looked up live and shown only to you. We do not keep these results on our servers.",
+          "To look up IP geolocation, the IP being queried is sent to third-party providers (such as ipinfo.io, ip-api.com and similar). Those lookups are governed by each provider's own privacy policy."
+        ]
+      },
+      "analytics": {
+        "title": "What we collect through analytics",
+        "paragraphs": [
+          "We use Google Analytics to understand how the site is used. Through it, the following is collected:"
+        ],
+        "bullets": [
+          "An approximate location derived from your IP address (country / region / city). Google does not share your full IP address with us.",
+          "Your browser language (for example en or zh).",
+          "Standard analytics data: pages visited, device and browser type, the referring site, and a randomly generated visitor ID stored in a cookie."
+        ]
+      },
+      "account": {
+        "title": "What we collect when you sign in",
+        "paragraphs": [
+          "Signing in is optional — you can use every tool on the site without an account. We use Google Firebase Authentication to manage your login and to sync your achievements and preferences. When you are signed in, the following is collected:"
+        ],
+        "bullets": [
+          "Your sign-in email, used to identify your account so we can provide the features that require logging in.",
+          "Your usage count of advanced features, used to calculate your achievements."
+        ]
+      },
+      "why": {
+        "title": "Why we collect it",
+        "analytics": "We use the analytics data to understand how the site is used and to improve the user experience. This data is not used to personally identify you, and we never sell it.",
+        "account": "Your account data (email and advanced-feature usage count) is used only to identify your account, to provide the features that require signing in, and to calculate your achievements. We do not use it for advertising and never sell it."
+      },
+      "cookies": {
+        "title": "Cookies & local storage",
+        "analytics": "Google Analytics stores a cookie to recognise returning visitors.",
+        "local": "Your own settings (theme, language, tool preferences) are kept in your browser's local storage and never leave your device."
+      },
+      "eu": {
+        "title": "If you are in the EU/EEA or UK",
+        "paragraphs": [
+          "We currently do not show a cookie consent banner. If you would rather not be measured by analytics, you can opt out at any time using the methods below — blocking the analytics cookie does not affect any tool on the site.",
+          "To opt out: use a content blocker (such as uBlock Origin) or Google's official opt-out browser add-on, block third-party cookies, or clear this site's cookies. Self-hosted copies of IPCheck.ing only run analytics if their operator configures it."
+        ]
+      },
+      "retention": {
+        "title": "Data retention",
+        "paragraphs": [
+          "Analytics data is kept according to Google Analytics' retention settings (up to 14 months) and is then deleted automatically. Account data is kept while your account exists."
+        ]
+      }
+    }
+  }
+}
diff --git a/frontend/locales/privacy/fr.json b/frontend/locales/privacy/fr.json
new file mode 100644
index 000000000..b82467182
--- /dev/null
+++ b/frontend/locales/privacy/fr.json
@@ -0,0 +1,60 @@
+{
+  "privacy": {
+    "Title": "Politique de confidentialité",
+    "UpdatedLabel": "Dernière mise à jour",
+    "Intro": "IPCheck.ing est une boîte à outils IP gratuite et open source. Nous l'avons conçue pour vous aider à voir ce que votre réseau et votre navigateur révèlent sur vous ; à ce titre, le respect de votre vie privée nous tient à cœur. Cette page explique ce qu'il advient de vos données lorsque vous utilisez le site.",
+    "sections": {
+      "tools": {
+        "title": "Comment fonctionnent les outils",
+        "paragraphs": [
+          "La plupart de ce que les outils vous affichent — détails de votre IP, empreinte du navigateur, DNS, connectivité et résultats de test de débit — est calculé dans votre navigateur ou interrogé en direct et affiché à vous seul. Nous ne conservons pas ces résultats sur nos serveurs.",
+          "Pour rechercher la géolocalisation d'une IP, l'IP interrogée est envoyée à des fournisseurs tiers (tels qu'ipinfo.io, ip-api.com et similaires). Ces recherches sont régies par la politique de confidentialité propre à chaque fournisseur."
+        ]
+      },
+      "analytics": {
+        "title": "Ce que nous collectons via l'analyse",
+        "paragraphs": [
+          "Nous utilisons Google Analytics pour comprendre l'utilisation du site. Par ce biais, les éléments suivants sont collectés :"
+        ],
+        "bullets": [
+          "Une localisation approximative déduite de votre adresse IP (pays / région / ville). Google ne nous communique pas votre adresse IP complète.",
+          "La langue de votre navigateur (par exemple en ou zh).",
+          "Des données d'analyse standard : pages consultées, type d'appareil et de navigateur, site référent, et un identifiant de visiteur généré aléatoirement et stocké dans un cookie."
+        ]
+      },
+      "account": {
+        "title": "Ce que nous collectons lorsque vous vous connectez",
+        "paragraphs": [
+          "La connexion est facultative — vous pouvez utiliser tous les outils du site sans compte. Nous utilisons Google Firebase Authentication pour gérer votre connexion et synchroniser vos succès et préférences. Lorsque vous êtes connecté, les éléments suivants sont collectés :"
+        ],
+        "bullets": [
+          "Votre adresse e-mail de connexion, utilisée pour identifier votre compte afin de fournir les fonctionnalités nécessitant une connexion.",
+          "Votre nombre d'utilisations des fonctionnalités avancées, utilisé pour calculer vos succès."
+        ]
+      },
+      "why": {
+        "title": "Pourquoi nous les collectons",
+        "analytics": "Nous utilisons les données d'analyse pour comprendre l'utilisation du site et améliorer l'expérience utilisateur. Ces données ne servent pas à vous identifier personnellement et ne sont jamais vendues.",
+        "account": "Les données de votre compte (e-mail et nombre d'utilisations des fonctionnalités avancées) servent uniquement à identifier votre compte, à fournir les fonctionnalités nécessitant une connexion et à calculer vos succès. Nous ne les utilisons pas à des fins publicitaires et ne les vendons jamais."
+      },
+      "cookies": {
+        "title": "Cookies et stockage local",
+        "analytics": "Google Analytics stocke un cookie pour reconnaître les visiteurs récurrents.",
+        "local": "Vos propres réglages (thème, langue, préférences des outils) sont conservés dans le stockage local de votre navigateur et ne quittent jamais votre appareil."
+      },
+      "eu": {
+        "title": "Si vous êtes dans l'UE/EEE ou au Royaume-Uni",
+        "paragraphs": [
+          "Nous n'affichons pas actuellement de bannière de consentement aux cookies. Si vous préférez ne pas être mesuré par les outils d'analyse, vous pouvez vous y opposer à tout moment via les méthodes ci-dessous — bloquer le cookie d'analyse n'affecte aucun outil du site.",
+          "Pour vous désinscrire : utilisez un bloqueur de contenu (tel qu'uBlock Origin) ou le module complémentaire officiel de désactivation de Google, bloquez les cookies tiers, ou effacez les cookies de ce site. Les copies auto-hébergées d'IPCheck.ing n'exécutent l'analyse que si leur exploitant la configure."
+        ]
+      },
+      "retention": {
+        "title": "Conservation des données",
+        "paragraphs": [
+          "Les données d'analyse sont conservées selon les paramètres de conservation de Google Analytics (jusqu'à 14 mois), puis supprimées automatiquement. Les données de compte sont conservées tant que votre compte existe."
+        ]
+      }
+    }
+  }
+}
diff --git a/frontend/locales/privacy/tr.json b/frontend/locales/privacy/tr.json
new file mode 100644
index 000000000..528850ca3
--- /dev/null
+++ b/frontend/locales/privacy/tr.json
@@ -0,0 +1,60 @@
+{
+  "privacy": {
+    "Title": "Gizlilik Politikası",
+    "UpdatedLabel": "Son güncelleme",
+    "Intro": "IPCheck.ing ücretsiz ve açık kaynaklı bir IP araç kutusudur. Ağınızın ve tarayıcınızın sizinle ilgili neleri açığa çıkardığını görmenize yardımcı olmak için geliştirdik; bu nedenle gizliliğinize saygı duymak bizim için önemli. Bu sayfa, siteyi kullanırken verilerinize ne olduğunu açıklar.",
+    "sections": {
+      "tools": {
+        "title": "Araçlar nasıl çalışır",
+        "paragraphs": [
+          "Araçların size gösterdiği çoğu şey — IP ayrıntılarınız, tarayıcı parmak iziniz, DNS, bağlantı ve hız testi sonuçları — tarayıcınızda hesaplanır veya canlı olarak sorgulanıp yalnızca size gösterilir. Bu sonuçları sunucularımızda saklamayız.",
+          "IP coğrafi konumunu sorgulamak için, sorgulanan IP üçüncü taraf sağlayıcılara (ipinfo.io, ip-api.com ve benzerleri gibi) gönderilir. Bu sorgular her sağlayıcının kendi gizlilik politikasına tabidir."
+        ]
+      },
+      "analytics": {
+        "title": "Analiz yoluyla ne topluyoruz",
+        "paragraphs": [
+          "Sitenin nasıl kullanıldığını anlamak için Google Analytics kullanıyoruz. Bunun aracılığıyla aşağıdakiler toplanır:"
+        ],
+        "bullets": [
+          "IP adresinizden çıkarılan yaklaşık bir konum (ülke / bölge / şehir). Google, tam IP adresinizi bizimle paylaşmaz.",
+          "Tarayıcı diliniz (örneğin en veya zh).",
+          "Standart analiz verileri: ziyaret edilen sayfalar, cihaz ve tarayıcı türü, yönlendiren site ve bir çerezde saklanan rastgele oluşturulmuş bir ziyaretçi kimliği."
+        ]
+      },
+      "account": {
+        "title": "Oturum açtığınızda ne topluyoruz",
+        "paragraphs": [
+          "Oturum açmak isteğe bağlıdır — sitedeki tüm araçları hesap olmadan kullanabilirsiniz. Girişinizi yönetmek ve başarımlarınızı ve tercihlerinizi senkronize etmek için Google Firebase Authentication kullanırız. Oturum açtığınızda aşağıdakiler toplanır:"
+        ],
+        "bullets": [
+          "Oturum açma e-postanız; hesabınızı tanımlamak ve oturum açma gerektiren özellikleri sunmak için kullanılır.",
+          "Gelişmiş özellikleri kullanım sayınız; başarımlarınızı hesaplamak için kullanılır."
+        ]
+      },
+      "why": {
+        "title": "Neden topluyoruz",
+        "analytics": "Analiz verilerini kullanarak site nasıl kullanıldığını anlamak ve kullanıcı deneyimini iyileştirmek için kullanırız. Bu veriler sizi kişisel olarak tanımlamak için kullanılmaz ve asla satılmaz.",
+        "account": "Hesap verileriniz (e-posta ve gelişmiş özellik kullanım sayısı) yalnızca hesabınızı tanımlamak, oturum açma gerektiren özellikleri sunmak ve başarımlarınızı hesaplamak için kullanılır. Bunları reklam için kullanmayız ve asla satmayız."
+      },
+      "cookies": {
+        "title": "Çerezler ve yerel depolama",
+        "analytics": "Google Analytics, geri dönen ziyaretçileri tanımak için bir çerez saklar.",
+        "local": "Kendi ayarlarınız (tema, dil, araç tercihleri) tarayıcınızın yerel depolamasında tutulur ve cihazınızdan asla ayrılmaz."
+      },
+      "eu": {
+        "title": "AB/AEA veya Birleşik Krallık'taysanız",
+        "paragraphs": [
+          "Şu anda bir çerez onayı bildirimi göstermiyoruz. Analiz tarafından ölçülmek istemiyorsanız, aşağıdaki yöntemleri kullanarak istediğiniz zaman vazgeçebilirsiniz — analiz çerezini engellemek sitedeki hiçbir aracı etkilemez.",
+          "Vazgeçmek için: bir içerik engelleyici (uBlock Origin gibi) veya Google'ın resmi devre dışı bırakma tarayıcı eklentisini kullanın, üçüncü taraf çerezleri engelleyin ya da bu sitenin çerezlerini temizleyin. IPCheck.ing'in kendi sunucusunda barındırılan kopyaları yalnızca işletmecisi yapılandırırsa analiz çalıştırır."
+        ]
+      },
+      "retention": {
+        "title": "Veri saklama",
+        "paragraphs": [
+          "Analiz verileri Google Analytics'in saklama ayarlarına göre (en fazla 14 ay) tutulur ve ardından otomatik olarak silinir. Hesap verileri, hesabınız var olduğu sürece saklanır."
+        ]
+      }
+    }
+  }
+}
diff --git a/frontend/locales/privacy/zh.json b/frontend/locales/privacy/zh.json
new file mode 100644
index 000000000..5b06f2f50
--- /dev/null
+++ b/frontend/locales/privacy/zh.json
@@ -0,0 +1,60 @@
+{
+  "privacy": {
+    "Title": "隐私政策",
+    "UpdatedLabel": "最后更新",
+    "Intro": "IPCheck.ing 是一个免费、开源的 IP 工具箱。我们做它，是为了帮助你看清自己的网络和浏览器会暴露哪些信息——正因如此，尊重你的隐私对我们很重要。本页说明你使用本站时，数据会被如何处理。",
+    "sections": {
+      "tools": {
+        "title": "工具如何工作",
+        "paragraphs": [
+          "工具展示给你的大部分内容——IP 详情、浏览器指纹、DNS、连通性与测速结果——都是在你的浏览器里计算，或实时查询后只展示给你本人。这些结果我们不会保存在服务器上。",
+          "查询 IP 地理位置时，被查询的 IP 会发送给第三方服务商（如 ipinfo.io、ip-api.com 等）。这些查询受各服务商自己的隐私政策约束。"
+        ]
+      },
+      "analytics": {
+        "title": "我们通过统计收集什么",
+        "paragraphs": [
+          "我们使用 Google Analytics 来了解网站的使用情况。通过 GA 会收集以下信息："
+        ],
+        "bullets": [
+          "根据你的 IP 地址推断出的大致位置（国家 / 地区 / 城市）。Google 不会把你的完整 IP 地址提供给我们。",
+          "你的浏览器语言（例如 en 或 zh）。",
+          "标准统计数据：访问的页面、设备与浏览器类型、来源网站，以及存放在 cookie 里的一个随机生成的访客 ID。"
+        ]
+      },
+      "account": {
+        "title": "你登录后我们收集什么",
+        "paragraphs": [
+          "登录是可选的——无需账户也能使用本站的所有工具。我们使用 Google Firebase 身份认证来管理你的登录，并同步你的成就和偏好设置。当你登录后，这些数据将会被收集："
+        ],
+        "bullets": [
+          "你的登录邮箱，用于识别用户身份，以便提供需要登录方可使用的功能。",
+          "你对高级功能的使用量，用于计算用户的成就。"
+        ]
+      },
+      "why": {
+        "title": "为什么收集这些",
+        "analytics": "我们通过 Google Analytics 收集的匿名数据用于了解网站的使用情况和改进产品的使用体验。这些统计数据不会用于识别你的个人身份，我们也绝不出售。",
+        "account": "账户相关的数据（邮箱、高级功能使用量）仅用于识别你的账户、提供需登录才能使用的功能，以及计算你的成就。我们不会用它做广告，也绝不出售。"
+      },
+      "cookies": {
+        "title": "Cookie 与本地存储",
+        "analytics": "Google Analytics 会存放一个 cookie 以识别回访的访客。",
+        "local": "你自己的设置（主题、语言、工具偏好）保存在浏览器的本地存储里，不会离开你的设备。"
+      },
+      "eu": {
+        "title": "如果你在欧盟 / 欧洲经济区或英国",
+        "paragraphs": [
+          "我们目前没有提供 Cookie 同意横幅。如果你不希望被统计追踪，可以随时通过下列方式选择退出——屏蔽统计 cookie 不会影响本站任何工具的使用。",
+          "退出方式：使用内容拦截器（如 uBlock Origin）或 Google 官方的退出浏览器插件、屏蔽第三方 cookie，或清除本站的 cookie。IPCheck.ing 的自部署版本只有在运营者自行配置时才会启用统计。"
+        ]
+      },
+      "retention": {
+        "title": "数据保留",
+        "paragraphs": [
+          "统计数据按 Google Analytics 的保留设置存储（最长 14 个月），到期后自动删除。账户数据在你的账户存续期间保留。"
+        ]
+      }
+    }
+  }
+}
diff --git a/frontend/locales/tr.json b/frontend/locales/tr.json
index 2acefcfa0..ed435416d 100644
--- a/frontend/locales/tr.json
+++ b/frontend/locales/tr.json
@@ -160,7 +160,7 @@
       "ipSourcesToCheckTips": "IP adresinizi kontrol etmek için sunucu sayısını seçin. Ne kadar çok sunucu seçerseniz, kontrolün tamamlanması o kadar uzun sürer.",
       "appSettings": "Program Ayarları",
       "autoRun": "Otomatik Çalıştır",
-      "autoRunTips": "Devre dışı bırakılırsa, uygulama yalnızca yerel IP'yi kontrol eder ve testleri otomatik olarak çalıştırmaz.",
+      "autoRunTips": "Sayfa yüklendiğinde IP bilgileri her zaman denetlenir. Diğer modüllerin başlangıçta otomatik çalışıp çalışmayacağını seçin.",
       "simpleMode": "Basit Mod",
       "simpleModeTips": "Her modülün açıklamasını gizler. Yalnızca mobil cihazlarda etkilidir.",
       "connectivityMultipleTests": "Çoklu Bağlantı Yenilemeleri",
@@ -841,9 +841,10 @@
     "contact": "Herhangi bir sorunuz veya öneriniz varsa, lütfen benimle e-posta yoluyla iletişime geçin: jason[AT]kenengba.com.",
     "personal": "Kişisel Web Sitesi",
     "blog": "Blogum",
-    "retiremoney": "Gelecek Planlayıcısı",
+    "linkedIn": "LinkedIn",
     "twitter": "Twitter",
-    "Sponsor": "Sponsor"
+    "Sponsor": "Destekleme",
+    "Privacy": "Gizlilik"
   },
   "specialthanks": {
     "Title": "Özel Teşekkürler",
diff --git a/frontend/locales/zh.json b/frontend/locales/zh.json
index 7db1b8cef..ce065893d 100644
--- a/frontend/locales/zh.json
+++ b/frontend/locales/zh.json
@@ -110,7 +110,7 @@
         },
         "ResourceHog": {
           "Title": "费油的车",
-          "Meet": "设置多次刷新可用性"
+          "Meet": "设置多次刷新网络连通性"
         },
         "MakingBigNews": {
           "Title": "搞大新闻",
@@ -160,13 +160,13 @@
       "ipSourcesToCheckTips": "选择默认从多少个 IP 检测服务器获取 IP 信息。",
       "appSettings": "程序设置",
       "autoRun": "自动运行",
-      "autoRunTips": "关闭后，打开应用将只会进行本机 IP 检测，不会自动运行其它的测试。",
+      "autoRunTips": "打开页面时始终会检测 IP 信息。你可以选择其它模块是否在启动时自动运行。",
       "simpleMode": "简洁模式",
       "simpleModeTips": "隐藏每个模块的说明文字，适合已经了解本应用的用户。",
-      "connectivityMultipleTests": "多次刷新可用性检测",
+      "connectivityMultipleTests": "多次刷新网络连通性检测",
       "connectivityMultipleTestsTips": "开启多次刷新后，程序在启动时将运行多次检测，并显示最小延迟值。",
-      "popupConnectivityNotifications": "显示可用性检测气泡",
-      "popupConnectivityNotificationsTips": "开启后，将会在首次检测时以气泡形式提示可用性结果。",
+      "popupConnectivityNotifications": "显示网络连通性检测气泡",
+      "popupConnectivityNotificationsTips": "开启后，将会在首次检测时以气泡形式提示网络连通性结果。",
       "ipDB": "IP 解析数据源",
       "ipDBTips": "你可以选择你默认使用的 IP 地理位置数据源，如果你选定的不可用，系统会依次使用后续的数据源。",
       "language": "语言设置",
@@ -841,9 +841,10 @@
     "contact": "如果你有任何问题或建议，请通过邮箱联系我： jason[AT]kenengba.com",
     "personal": "个人网站",
     "blog": "可能吧博客",
-    "retiremoney": "躺平计算器",
+    "linkedIn": "LinkedIn",
     "twitter": "Twitter",
-    "Sponsor": "赞助"
+    "Sponsor": "赞助我们",
+    "Privacy": "隐私政策"
   },
   "specialthanks": {
     "Title": "特别鸣谢",
diff --git a/frontend/main.js b/frontend/main.js
index 1165f1c82..79b334a62 100644
--- a/frontend/main.js
+++ b/frontend/main.js
@@ -5,6 +5,7 @@ import App from './App.vue'
 import i18n, { loadActiveLocaleMessages } from './locales/i18n';
 import router from './router';
 import { analytics } from './utils/analytics';
+import { getTimezoneInfo } from './utils/timezone';
 import { unregisterLegacyServiceWorker } from './utils/unregister-service-worker';
 import { addCollection } from '@iconify/vue';
 
@@ -70,6 +71,10 @@ window.addEventListener('resize', handleResize);
 
 // Start Google Analytics
 analytics.page();
+const { timezone, offset } = getTimezoneInfo();
+if (timezone || offset) {
+    analytics.setUserProperties({ timezone, tz_offset: offset });
+}
 unregisterLegacyServiceWorker();
 
 // Check Firebase environment
diff --git a/frontend/router/index.js b/frontend/router/index.js
index 572135d7d..b5ad4b428 100644
--- a/frontend/router/index.js
+++ b/frontend/router/index.js
@@ -10,10 +10,12 @@ import Home from '@/components/Home.vue';
 // Home is imported eagerly (it's the default landing); the standalone layout is
 // lazy so it stays out of the homepage bundle.
 const StandaloneTool = () => import('@/components/StandaloneTool.vue');
+const PrivacyPolicy = () => import('@/components/PrivacyPolicy.vue');
 
 const routes = [
   { path: '/', name: 'home', component: Home },
   { path: '/tools/:slug', name: 'tool', component: StandaloneTool },
+  { path: '/privacy', name: 'privacy', component: PrivacyPolicy },
   // Unknown paths fall back to the homepage.
   { path: '/:pathMatch(.*)*', redirect: '/' },
 ];
diff --git a/frontend/store.js b/frontend/store.js
index 4b4f92202..73cdf5628 100644
--- a/frontend/store.js
+++ b/frontend/store.js
@@ -5,22 +5,11 @@ import { auth } from './firebase-init.js';
 import i18n from './locales/i18n.js';
 import { createInitialAchievementsState } from './data/achievements.js';
 import { createInitialIpDBs, buildDbUrl } from './data/ip-databases.js';
-import { createDefaultPreferences } from './data/default-preferences.js';
+import { createDefaultPreferences, migrateLegacyPreferences, PREFS_STORAGE_KEY, LEGACY_PREFS_KEYS } from './data/default-preferences.js';
 import { createMountingStatus, createLoadingStatus, DEFAULT_SECTION } from './data/sections.js';
 import { fetchWithTimeout } from './utils/fetch-with-timeout.js';
 const { t } = i18n.global;
 
-// Versioned localStorage key for userPreferences.
-//
-// When a release changes a default in a way that would be disruptive if
-// merged on top of older stored overrides (e.g. repurposing an option, or
-// when we simply want everyone to see the freshly-tuned defaults), bump
-// this suffix. The mismatch leaves old stored values "orphaned" — the
-// loader below won't find anything at the new key, falls back to defaults,
-// and removes the legacy key(s) so browsers don't accumulate dead data.
-const PREFS_STORAGE_KEY = 'userPreferences_v6';
-const LEGACY_PREFS_KEYS = ['userPreferences'];
-
 export const useMainStore = defineStore('main', {
 
   state: () => ({
@@ -159,11 +148,17 @@ export const useMainStore = defineStore('main', {
         const currentPreferences = JSON.parse(storedPreferences);
         preferencesToStore = { ...defaultPreferences, ...currentPreferences };
       } else {
-        preferencesToStore = defaultPreferences;
-        // First load on the current schema version — purge any older keys
-        // so we don't leave zombie entries in the browser forever. Running
-        // this only in the "fresh install" branch avoids racing users who
-        // have already migrated on another tab.
+        // No prefs at the current key yet: carry over the newest legacy
+        // snapshot (migrating retired keys), then purge the old keys. Purging
+        // only here avoids racing a tab that already migrated.
+        const legacyRaw = LEGACY_PREFS_KEYS
+          .map((key) => localStorage.getItem(key))
+          .find((value) => value !== null);
+        let legacy = null;
+        if (legacyRaw) {
+          try { legacy = JSON.parse(legacyRaw); } catch { legacy = null; }
+        }
+        preferencesToStore = { ...defaultPreferences, ...migrateLegacyPreferences(legacy) };
         for (const legacyKey of LEGACY_PREFS_KEYS) {
           if (localStorage.getItem(legacyKey) !== null) {
             localStorage.removeItem(legacyKey);
diff --git a/frontend/utils/analytics.js b/frontend/utils/analytics.js
index ca01da06e..6e9cb7448 100644
--- a/frontend/utils/analytics.js
+++ b/frontend/utils/analytics.js
@@ -3,6 +3,10 @@
 // Use optional chaining to fallback, avoid TypeError when evaluating at module top level
 const MEASUREMENT_ID = import.meta.env?.VITE_GOOGLE_ANALYTICS_ID || '';
 
+// True only when a GA measurement id is configured. The privacy page reads this
+// so self-hosted deployments without GA don't show an inaccurate analytics notice.
+export const isAnalyticsEnabled = !!MEASUREMENT_ID;
+
 // Global state
 let scriptInjected = false;
 let eventQueue = [];
@@ -40,7 +44,8 @@ function initialiseGtag() {
     window.gtag = gtag;
 
     gtag('js', new Date());
-    gtag('config', MEASUREMENT_ID);
+    // debug_mode surfaces events in GA's DebugView — keep it to the Vite dev
+    gtag('config', MEASUREMENT_ID, { debug_mode: import.meta.env?.DEV === true });
 
     flushQueue();
 }
@@ -82,6 +87,14 @@ const analytics = {
     /** analytics.identify(userId, traits) */
     identify(userId, traits = {}) {
         pushEvent('config', MEASUREMENT_ID, { user_id: userId, ...traits });
+    },
+
+    /**
+     * analytics.setUserProperties({ key: value, ... })
+     * Sets GA4 user-scoped properties that persist across the session's events.
+     */
+    setUserProperties(props = {}) {
+        pushEvent('set', 'user_properties', props);
     }
 };
 
diff --git a/frontend/utils/authenticated-fetch.js b/frontend/utils/authenticated-fetch.js
index 83adcb45d..2e9f3b07c 100644
--- a/frontend/utils/authenticated-fetch.js
+++ b/frontend/utils/authenticated-fetch.js
@@ -1,13 +1,20 @@
+// Authenticated fetch wrapper: attaches the Firebase ID token for /api/* proxy
+// calls and enforces a client-side timeout so a hung backend can't pin the
+// request open indefinitely. Every caller hits an /api/* proxy whose upstream is
+// capped at 8s (fetchUpstream); the 10s client default sits just above that so
+// the server's own error surfaces instead of the browser aborting first.
 import { useMainStore } from '../store';
+import { fetchWithTimeout } from './fetch-with-timeout.js';
 
-export async function authenticatedFetch(url, method = 'GET', body = null) {
+export async function authenticatedFetch(url, method = 'GET', body = null, timeoutMs = 10000) {
     const store = useMainStore();
     const options = {
-        method: method,
+        method,
         headers: {
             'Content-Type': 'application/json',
         },
         body: body ? JSON.stringify(body) : null, // If body is provided, convert it to a JSON string
+        timeoutMs,
     };
 
     // Check if the URL is a proxy API that needs authentication
@@ -19,7 +26,9 @@ export async function authenticatedFetch(url, method = 'GET', body = null) {
     }
 
     try {
-        const response = await fetch(url, options);
+        // fetchWithTimeout aborts at timeoutMs; the AbortError lands in the catch
+        // below, so a stuck request fails fast and the caller can fail over.
+        const response = await fetchWithTimeout(url, options);
 
         if (!response.ok) {
             let errorDetail = '';
@@ -37,4 +46,4 @@ export async function authenticatedFetch(url, method = 'GET', body = null) {
     } catch (error) {
         throw new Error(`Fetch failed: ${error.message}`);
     }
-}
\ No newline at end of file
+}
diff --git a/frontend/utils/format-star-count.js b/frontend/utils/format-star-count.js
new file mode 100644
index 000000000..548c873c9
--- /dev/null
+++ b/frontend/utils/format-star-count.js
@@ -0,0 +1,26 @@
+// Compact formatter for the GitHub star count in the nav badge: < 1000 stays
+// exact, larger values collapse to a one-decimal "k" / "M" (trailing ".0"
+// dropped). Returns '' for anything that isn't a usable non-negative number, so
+// the caller can hide the count when the fetch fails or hasn't landed.
+
+const UNITS = [
+  { value: 1e6, suffix: 'M' },
+  { value: 1e3, suffix: 'k' },
+];
+
+export function formatStarCount(value) {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) return '';
+  if (value < 1000) return String(Math.floor(value));
+
+  for (const { value: unit, suffix } of UNITS) {
+    if (value >= unit) {
+      const scaled = value / unit;
+      // Three-or-more-digit results (e.g. 123k) read better without a decimal.
+      const str = scaled >= 100
+        ? String(Math.round(scaled))
+        : scaled.toFixed(1).replace(/\.0$/, '');
+      return str + suffix;
+    }
+  }
+  return String(Math.floor(value));
+}
diff --git a/frontend/utils/timezone.js b/frontend/utils/timezone.js
new file mode 100644
index 000000000..d5413da52
--- /dev/null
+++ b/frontend/utils/timezone.js
@@ -0,0 +1,28 @@
+// Browser-timezone collection for analytics.
+// GA4 derives Country from the request IP and Language from navigator.language,
+// but it never captures the browser's own timezone.
+
+// Format a UTC offset given in minutes (east-positive) as "+08:00" / "-05:00".
+// 480 → "+08:00", -300 → "-05:00", 0 → "+00:00".
+export const formatUtcOffset = (offsetMinutes) => {
+    const sign = offsetMinutes >= 0 ? '+' : '-';
+    const abs = Math.abs(offsetMinutes);
+    const hh = String(Math.floor(abs / 60)).padStart(2, '0');
+    const mm = String(abs % 60).padStart(2, '0');
+    return `${sign}${hh}:${mm}`;
+};
+
+// Read the browser's timezone
+export const getTimezoneInfo = () => {
+    let timezone = '';
+    let offset = '';
+    try {
+        timezone = Intl.DateTimeFormat().resolvedOptions().timeZone || '';
+    } catch { /* leave empty */ }
+    try {
+        // getTimezoneOffset() is UTC-minus-local in minutes; negate it so the
+        // result is east-positive, matching how offsets are written (+08:00).
+        offset = formatUtcOffset(-new Date().getTimezoneOffset());
+    } catch { /* leave empty */ }
+    return { timezone, offset };
+};
diff --git a/frontend/utils/transform-ip-data.js b/frontend/utils/transform-ip-data.js
index 21e47f727..d1f9f361c 100644
--- a/frontend/utils/transform-ip-data.js
+++ b/frontend/utils/transform-ip-data.js
@@ -1,9 +1,23 @@
+// The static map renders at zoom 3 (continent scale), where ~0.176° spans a
+// single pixel. Quantizing the request coords to 1 decimal (~0.1°, sub-pixel)
+// leaves the marker visually unchanged while collapsing every IP in the same
+// 0.1° grid cell onto one CF edge-cache key — the cache key is the client URL,
+// so this rounding must happen here, not in the backend handler. The full-
+// precision lat/lon are still kept on baseData for display.
+function mapCoord(value) {
+    return Number(value).toFixed(1);
+}
+
 // Parse IP data
 function transformDataFromIPapi(data, ipGeoSource, t, mapLanguage) {
     if (data.error) {
         throw new Error(data.reason);
     }
 
+    const hasCoords = data.latitude && data.longitude;
+    const mapLat = hasCoords ? mapCoord(data.latitude) : "";
+    const mapLon = hasCoords ? mapCoord(data.longitude) : "";
+
     const baseData = {
         country_name: data.country_name || "",
         country_code: data.country === 'N/A' ? '' : data.country,
@@ -14,8 +28,8 @@ function transformDataFromIPapi(data, ipGeoSource, t, mapLanguage) {
         isp: data.org || "",
         asn: data.asn || "",
         asnlink: data.asn ? data.asn.startsWith('AS') ? `https://bgp.tools/as/${data.asn}` : false : false,
-        mapUrl: data.latitude && data.longitude ? `/api/map?latitude=${data.latitude}&longitude=${data.longitude}&language=${mapLanguage}` : "",
-        mapUrl_dark: data.latitude && data.longitude ? `/api/map?latitude=${data.latitude}&longitude=${data.longitude}&language=${mapLanguage}&CanvasMode=Dark` : ""
+        mapUrl: hasCoords ? `/api/map?latitude=${mapLat}&longitude=${mapLon}&language=${mapLanguage}` : "",
+        mapUrl_dark: hasCoords ? `/api/map?latitude=${mapLat}&longitude=${mapLon}&language=${mapLanguage}&CanvasMode=Dark` : ""
     };
 
     if (ipGeoSource === 0) {
diff --git a/package.json b/package.json
index e9694fd10..5518626c7 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,7 @@
   "private": true,
   "version": "6.4.0",
   "type": "module",
-  "packageManager": "pnpm@11.6.0+sha512.9a36518224080c6fe5165afdcfe79bfa118c29be703f3f462b1e32efe1e98e47e8750b148e08286250aad4113cc7993ca413c4e2cd447752708c2ee5751bc95f",
+  "packageManager": "pnpm@11.9.0",
   "scripts": {
     "dev": "concurrently \"vite\" \"nodemon backend-server.js\"",
     "build": "vite build",
@@ -18,10 +18,10 @@
     "@cloudflare/speedtest": "^1.10.1",
     "@iconify-json/circle-flags": "^1.2.10",
     "@iconify/vue": "^5.0.1",
-    "@khmyznikov/pwa-install": "^0.6.3",
-    "@lucide/vue": "^1.18.0",
+    "@khmyznikov/pwa-install": "^0.6.4",
+    "@lucide/vue": "^1.22.0",
     "@tanstack/vue-table": "^8.21.3",
-    "@thumbmarkjs/thumbmarkjs": "^1.9.1",
+    "@thumbmarkjs/thumbmarkjs": "^1.10.0",
     "@vueuse/core": "^14.3.0",
     "chart.js": "^4.5.1",
     "circle-progress.vue": "^3.4.1",
@@ -34,36 +34,36 @@
     "express": "^5.2.1",
     "express-rate-limit": "^8.5.2",
     "express-slow-down": "^3.1.0",
-    "firebase": "^12.14.0",
+    "firebase": "^12.15.0",
     "html-to-image": "^1.11.13",
-    "http-proxy-middleware": "^4.1.0",
+    "http-proxy-middleware": "^4.1.1",
     "maxmind": "^5.0.6",
     "pinia": "^3.0.4",
     "pino": "^10.3.1",
     "pino-http": "^11.0.0",
     "pino-pretty": "^13.1.3",
-    "reka-ui": "^2.9.10",
+    "reka-ui": "^2.10.1",
     "svgmap": "2.21.0",
     "tailwind-merge": "^3.6.0",
-    "tar": "^7.5.16",
+    "tar": "^7.5.19",
     "tw-animate-css": "^1.4.0",
     "ua-parser-js": "^2.0.10",
     "unbzip2-stream": "^1.4.3",
     "vaul-vue": "^0.4.1",
-    "vue": "^3.5.38",
-    "vue-i18n": "^11.4.5",
+    "vue": "^3.5.39",
+    "vue-i18n": "^11.4.6",
     "vue-markdown-render": "^2.3.1",
     "vue-router": "^5.1.0",
     "vue-sonner": "^2.0.9",
     "whoiser": "^1.18.0"
   },
   "devDependencies": {
-    "@tailwindcss/vite": "^4.3.1",
+    "@tailwindcss/vite": "^4.3.2",
     "@vitejs/plugin-vue": "^6.0.7",
-    "code-inspector-plugin": "^1.6.0",
+    "code-inspector-plugin": "^1.6.3",
     "nodemon": "^3.1.14",
-    "tailwindcss": "^4.3.1",
+    "tailwindcss": "^4.3.2",
     "vconsole": "^3.15.1",
-    "vite": "^8.0.16"
+    "vite": "^8.1.0"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1ac03f526..3c23a6c74 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -16,22 +16,22 @@ importers:
         version: 1.2.10
       '@iconify/vue':
         specifier: ^5.0.1
-        version: 5.0.1(vue@3.5.38)
+        version: 5.0.1(vue@3.5.39)
       '@khmyznikov/pwa-install':
-        specifier: ^0.6.3
-        version: 0.6.3(@lit/react@1.0.8(@types/react@19.2.14))(@types/dom-chromium-installation-events@101.0.4)(@types/web-app-manifest@1.0.9)(lit@3.3.2)
+        specifier: ^0.6.4
+        version: 0.6.4(@lit/react@1.0.8(@types/react@19.2.14))(@types/dom-chromium-installation-events@101.0.4)(@types/web-app-manifest@1.0.9)(lit@3.3.2)
       '@lucide/vue':
-        specifier: ^1.18.0
-        version: 1.18.0(vue@3.5.38)
+        specifier: ^1.22.0
+        version: 1.22.0(vue@3.5.39)
       '@tanstack/vue-table':
         specifier: ^8.21.3
-        version: 8.21.3(vue@3.5.38)
+        version: 8.21.3(vue@3.5.39)
       '@thumbmarkjs/thumbmarkjs':
-        specifier: ^1.9.1
-        version: 1.9.1
+        specifier: ^1.10.0
+        version: 1.10.0
       '@vueuse/core':
         specifier: ^14.3.0
-        version: 14.3.0(vue@3.5.38)
+        version: 14.3.0(vue@3.5.39)
       chart.js:
         specifier: ^4.5.1
         version: 4.5.1
@@ -66,20 +66,20 @@ importers:
         specifier: ^3.1.0
         version: 3.1.0(express@5.2.1(supports-color@5.5.0))
       firebase:
-        specifier: ^12.14.0
-        version: 12.14.0
+        specifier: ^12.15.0
+        version: 12.15.0
       html-to-image:
         specifier: ^1.11.13
         version: 1.11.13
       http-proxy-middleware:
-        specifier: ^4.1.0
-        version: 4.1.0
+        specifier: ^4.1.1
+        version: 4.1.1(supports-color@5.5.0)
       maxmind:
         specifier: ^5.0.6
         version: 5.0.6
       pinia:
         specifier: ^3.0.4
-        version: 3.0.4(vue@3.5.38)
+        version: 3.0.4(vue@3.5.39)
       pino:
         specifier: ^10.3.1
         version: 10.3.1
@@ -90,8 +90,8 @@ importers:
         specifier: ^13.1.3
         version: 13.1.3
       reka-ui:
-        specifier: ^2.9.10
-        version: 2.9.10(vue@3.5.38)
+        specifier: ^2.10.1
+        version: 2.10.1(vue@3.5.39)
       svgmap:
         specifier: 2.21.0
         version: 2.21.0
@@ -99,8 +99,8 @@ importers:
         specifier: ^3.6.0
         version: 3.6.0
       tar:
-        specifier: ^7.5.16
-        version: 7.5.16
+        specifier: ^7.5.19
+        version: 7.5.19
       tw-animate-css:
         specifier: ^1.4.0
         version: 1.4.0
@@ -112,19 +112,19 @@ importers:
         version: 1.4.3
       vaul-vue:
         specifier: ^0.4.1
-        version: 0.4.1(reka-ui@2.9.10(vue@3.5.38))(vue@3.5.38)
+        version: 0.4.1(reka-ui@2.10.1(vue@3.5.39))(vue@3.5.39)
       vue:
-        specifier: ^3.5.38
-        version: 3.5.38
+        specifier: ^3.5.39
+        version: 3.5.39
       vue-i18n:
-        specifier: ^11.4.5
-        version: 11.4.5(vue@3.5.38)
+        specifier: ^11.4.6
+        version: 11.4.6(vue@3.5.39)
       vue-markdown-render:
         specifier: ^2.3.1
-        version: 2.3.1(vue@3.5.38)
+        version: 2.3.1(vue@3.5.39)
       vue-router:
         specifier: ^5.1.0
-        version: 5.1.0(@vue/compiler-sfc@3.5.38)(pinia@3.0.4(vue@3.5.38))(vite@8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.38)
+        version: 5.1.0(@vue/compiler-sfc@3.5.39)(pinia@3.0.4(vue@3.5.39))(vite@8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.39)
       vue-sonner:
         specifier: ^2.0.9
         version: 2.0.9
@@ -133,26 +133,26 @@ importers:
         version: 1.18.0
     devDependencies:
       '@tailwindcss/vite':
-        specifier: ^4.3.1
-        version: 4.3.1(vite@8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))
+        specifier: ^4.3.2
+        version: 4.3.2(vite@8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))
       '@vitejs/plugin-vue':
         specifier: ^6.0.7
-        version: 6.0.7(vite@8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.38)
+        version: 6.0.7(vite@8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.39)
       code-inspector-plugin:
-        specifier: ^1.6.0
-        version: 1.6.0
+        specifier: ^1.6.3
+        version: 1.6.3
       nodemon:
         specifier: ^3.1.14
         version: 3.1.14
       tailwindcss:
-        specifier: ^4.3.1
-        version: 4.3.1
+        specifier: ^4.3.2
+        version: 4.3.2
       vconsole:
         specifier: ^3.15.1
         version: 3.15.1
       vite:
-        specifier: ^8.0.16
-        version: 8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
+        specifier: ^8.1.0
+        version: 8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
 
 packages:
 
@@ -219,35 +219,35 @@ packages:
     resolution: {integrity: sha512-VRS5cONxbK82MLufBcihPzQXdYgJexj7x2cu4oIv8lSOFfSrKNM/sfzBpBYbrqPuubOY4Xm111RbM3SEzHCkwQ==}
     engines: {node: '>=18'}
 
-  '@code-inspector/core@1.6.0':
-    resolution: {integrity: sha512-RMJA9RQVpU12L5Df32lhOC7kh0CwBbydaqr/dQmTEX9rjcr2cyEAalWSaglcMber6+iOHDZSiyaFIJCGKOSV3w==}
+  '@code-inspector/core@1.6.3':
+    resolution: {integrity: sha512-SIxaYDT0eXwnJxOrJ1O8IWeLi4vdTqM+pG/bVpWlkMYamifx5yS4g2G6Sg3BTFiyp8aXGBdIf9U23z6u8tdd/w==}
 
-  '@code-inspector/esbuild@1.6.0':
-    resolution: {integrity: sha512-IDSOrQUaKDecklfd5wNqgU3j4TSlcqLspWw5+xGS8n5cFACy2kA4aM+vE4xWK3OXiooLB9sOGbVcOaZzda2hhA==}
+  '@code-inspector/esbuild@1.6.3':
+    resolution: {integrity: sha512-KWE+JOwNSO5pskUn740zncqAUsTvEFv1EAXBAMSvB01jfCqqUwwzjbj9d5JXlLFaDtLykNdP9cLnbiWBnXWS1w==}
 
-  '@code-inspector/mako@1.6.0':
-    resolution: {integrity: sha512-99fPSBfbEiYMpZWHc2NSShzxDecNgn8ykziqeYjSqnNZTdCjhlEmMR/KymOMoI/Ott1wLM3H5fqa7Lpehx9NxQ==}
+  '@code-inspector/mako@1.6.3':
+    resolution: {integrity: sha512-uCWQDzOvhZmrWVxbI9C5zhszwmhOe5gqC8LEsaToimeBmk4ENRDG0NA7fcGw3LvieqPfeQkyuHSxPgsQ/vZelg==}
 
-  '@code-inspector/turbopack@1.6.0':
-    resolution: {integrity: sha512-hhJGozLBa53NNi4Apn27Di0DAdfGzjFB5/iVsklQHKOxnGSJ7VviPO01Bi2W6sfOc6tY27wvsys1I1kc42KOLw==}
+  '@code-inspector/turbopack@1.6.3':
+    resolution: {integrity: sha512-/kXAkBpp6VP7bTZrDmvDJyFyBVeflf/3dpCQAbvGamCRRDIEiDE6Ap8PTQtcKB2uU9C/zBP8bYQLYqffmcEfLg==}
 
-  '@code-inspector/vite@1.6.0':
-    resolution: {integrity: sha512-P406JrDxZ8iGr26X3YzRwuR/jeYtrAhhjJu9BH0FpXRVcMolyp3a4kvMYzZ2IfulAxNMvcEAZsfr4DHLBFNktg==}
+  '@code-inspector/vite@1.6.3':
+    resolution: {integrity: sha512-UwUXMsPeDhPfBNoXELvW1FIdg/hsmnnSSZt6FNxHuHiE5VR0MRVjsOI2LzbK/T4kV27/fepad2wZ1GXY7N7+Kg==}
 
-  '@code-inspector/webpack@1.6.0':
-    resolution: {integrity: sha512-TVEYQ/hgWpyNTibUQh/nf/01ipDdP9/VGJJhL2eVpyBKlP4k8ipKusXaCEbC4hvUQsak6T11rwPQIXIf+WONRQ==}
+  '@code-inspector/webpack@1.6.3':
+    resolution: {integrity: sha512-q0Jf2wFpQWCzoyHDoNsdawBMad+i2P8GHaCnsiJiVZ/oWWvbPyFFlIdBWzMIxk9zxos3M2v1i/88hufYE4IgSw==}
 
-  '@emnapi/core@1.10.0':
-    resolution: {integrity: sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==}
+  '@emnapi/core@1.11.1':
+    resolution: {integrity: sha512-RSvbQmHzdKzNsLYa/wHrbc3KN4sYLKAdPZxqiM2HATqv/SBk2/ENSHpvXGaLOMcsAyz0poEGqkmmKYG3OWiJEQ==}
 
-  '@emnapi/runtime@1.10.0':
-    resolution: {integrity: sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==}
+  '@emnapi/runtime@1.11.1':
+    resolution: {integrity: sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==}
 
-  '@emnapi/wasi-threads@1.2.1':
-    resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
+  '@emnapi/wasi-threads@1.2.2':
+    resolution: {integrity: sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==}
 
-  '@firebase/ai@2.13.0':
-    resolution: {integrity: sha512-nJJDQKqjAcbkZdZGT/5WTVLrGZ+pYhWbwKC90nNzmvtoRTtnOJaNS34fhKSHQeB9SALgD2kxuWT5I4AkytdZ/Q==}
+  '@firebase/ai@2.13.1':
+    resolution: {integrity: sha512-RhT/VViTPBSplhQSuEp62HhLvfsV+LowMh8ZUo5MMRDzG7oFtSget4Kmg5oHP50hDVyWQuQj6to9iPFEZk08Tw==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       '@firebase/app': 0.x
@@ -266,8 +266,8 @@ packages:
     peerDependencies:
       '@firebase/app': 0.x
 
-  '@firebase/app-check-compat@0.4.4':
-    resolution: {integrity: sha512-9iP0MvmaVagulNXmrca96U3tqNAI3j98wsC1z7rj62nnOTajlrHM//jjB9VoHqRw6/islMskp6RsKnM7vhLDqA==}
+  '@firebase/app-check-compat@0.4.5':
+    resolution: {integrity: sha512-JI17mVcZs34zO6ZeSCrw4U2iohqy+n6GIzkbmsA+TbVjmvFLkUKt3bs5M+qRBteQm/0IWzqSHYFzEQLzDTQebg==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       '@firebase/app-compat': 0.x
@@ -278,25 +278,25 @@ packages:
   '@firebase/app-check-types@0.5.4':
     resolution: {integrity: sha512-xV7JsIyzVr15aA7f3Pi0rB9gdBuVubs89FGA8VkRYA4g0l78poADgdfrScgf7NndSg9mm7cR7PJyY0+t22KaGw==}
 
-  '@firebase/app-check@0.11.4':
-    resolution: {integrity: sha512-G8EsbVJV9gSfoibx0dNoNOUrvr+PkL7J//+W/BST/oUassimkZeq9bjj3bKkB0pn4og5GMQ9qs7FefwP00kkgg==}
+  '@firebase/app-check@0.12.0':
+    resolution: {integrity: sha512-wMeT6HLWRAuW7Cp/5UjWBGKgjPNxWNOoNf4PRIv0weljoGMZVeqbUY7wNBWTI2/31cX1NlXx8gQruDLsUShB3Q==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       '@firebase/app': 0.x
 
-  '@firebase/app-compat@0.5.13':
-    resolution: {integrity: sha512-pn3FvXwUR34kWPccDQfCKsNZcM2wD1OS+J1jeEgzM1ZNXoxR2NaF6e5DjDuRrnTwR6LN2XQQt0IqE6yKmgpCQg==}
+  '@firebase/app-compat@0.5.14':
+    resolution: {integrity: sha512-rgFmiofYsdS9ZG/Bht3OBxJtPD3zWE1cffShWubEm+4+qZeyzCbmtb1q6jOEjN9fB7uufe4rQmWOPXouR3758Q==}
     engines: {node: '>=20.0.0'}
 
   '@firebase/app-types@0.9.5':
     resolution: {integrity: sha512-YevqTjvo7Iujsa9Dwowmd6dSoElhzmD63ZSrq6bzjvQ6POjYgNjOFHLmNIgJs48eNO093NCERibuFnxbfOvU7A==}
 
-  '@firebase/app@0.14.13':
-    resolution: {integrity: sha512-H89Jeyp31+EZk9GPu6vaeL9mEmoXgM3nASB7UPBYYS/lqAks21mO1BU1dF8NbsVTL6tgGZkGUtiGJgxtDiwHkw==}
+  '@firebase/app@0.15.0':
+    resolution: {integrity: sha512-soIskolmGgbpi0K/MfrjtdpO1220qRCbXA4Z8Qx3lM+fVwA3q40m+OM+7zBHd2nuQCrLXb33L6Oc1aBH3Y26AQ==}
     engines: {node: '>=20.0.0'}
 
-  '@firebase/auth-compat@0.6.7':
-    resolution: {integrity: sha512-XgKnOgY1Siq7gylAmLkYtHAlRxNeWEAspH+nO3gJZJnfHqoTHbr9UjJ3nHNFALYXV5CfpQlyPROyB2ztySBHBQ==}
+  '@firebase/auth-compat@0.6.8':
+    resolution: {integrity: sha512-llcBREUC4iSNKZ6rvwud7Oz9Q7aAWU6KuQLa6pdu7Q+QAQsy4JLw6yFgxwtmzabsgznHmmcsX2UjHLLzqUxi3Q==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       '@firebase/app-compat': 0.x
@@ -310,8 +310,8 @@ packages:
       '@firebase/app-types': 0.x
       '@firebase/util': 1.x
 
-  '@firebase/auth@1.13.2':
-    resolution: {integrity: sha512-B4w0iS7MxRg28oIh2fJFTE6cM0lYdBrW19eHpc42jqEcloUjlYyVrpPqZvqA4+v9KFEVSKEs2SfWyta7hbzkJQ==}
+  '@firebase/auth@1.13.3':
+    resolution: {integrity: sha512-bqiq4uubDN2YyQkdvSWPQeJyXAv2O76ImF41En9b6UhV5JuBVYDoHYrrrE3NzIuGkpFMKagfhMRP4Vz6t+yQSQ==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       '@firebase/app': 0.x
@@ -340,8 +340,8 @@ packages:
     resolution: {integrity: sha512-XwWCa+E4TvNGpGwXrycLRNfdogADwFcvuhyow6wDWma9W54roaQIhe+4PM0KiLsIftBdSCGI7OKCXrdSRHbIhw==}
     engines: {node: '>=20.0.0'}
 
-  '@firebase/firestore-compat@0.4.10':
-    resolution: {integrity: sha512-yMP3FADDjikdrQv4YmvL4EkIny6Hw+N+a2O5T40rlHiniyMpRPxgYkKiFOvMZnsqKLqBVnKqCAElC0pa/IZtdw==}
+  '@firebase/firestore-compat@0.4.11':
+    resolution: {integrity: sha512-W7o1WdwWq5aABK5Up2ncSvTQs/QGLR/fy7cVpFBNqhsXtxoMtflHf2xBIG6+aoptcuGAobddq4g2Sq27wqHaYw==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       '@firebase/app-compat': 0.x
@@ -352,8 +352,8 @@ packages:
       '@firebase/app-types': 0.x
       '@firebase/util': 1.x
 
-  '@firebase/firestore@4.15.0':
-    resolution: {integrity: sha512-Fj9osqYkz2Rqr7kW3/A8BRd8CyJ7yA5K8YjhihRdyJWbL+FsELVcR6DpoCplrp1IyU+xeGgTubo1UOySXpY+EA==}
+  '@firebase/firestore@4.16.0':
+    resolution: {integrity: sha512-qdHMHMvMr0nRMuZyWNR/ArWa0YlPE3C4eAbmxTASJMYXAesKPL0Y54p70moggrNPzaK7MSIIq5RDJJyntQyIYA==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       '@firebase/app': 0.x
@@ -418,16 +418,16 @@ packages:
     peerDependencies:
       '@firebase/app': 0.x
 
-  '@firebase/remote-config-compat@0.2.25':
-    resolution: {integrity: sha512-FnA5S4IxFJAAFrCnYzWlO0FCaizlYdqhe42ygFMA+wE/mUP+w36iXzHyKj1OO1A+2gyMFjeRHyg8HhkJ6c5vRA==}
+  '@firebase/remote-config-compat@0.2.26':
+    resolution: {integrity: sha512-uC57Tc7GYYOCnMgLkGIVf999XlaYaPDONoa54c93YTKDctlvCZI89z0zQ2RbhGR8Zf+QuCbQHs/99vqoE84a7g==}
     peerDependencies:
       '@firebase/app-compat': 0.x
 
   '@firebase/remote-config-types@0.5.1':
     resolution: {integrity: sha512-cX/1LT6KQwkXzck2eSzeKnuvXZCyr8qaPpDcikoJs7jmI+oBOXixpDLeDtWj1U6GNMkIoXrEDNoyT2Ypcyp5/A==}
 
-  '@firebase/remote-config@0.8.4':
-    resolution: {integrity: sha512-lslywR5lGvHWTu4z/MPoYs3UwS3CKdeY+ELXY87087VsOpBpkD+9Orra23tA9GW683arPTDOM3CM6eKmtiOO3g==}
+  '@firebase/remote-config@0.8.5':
+    resolution: {integrity: sha512-zb+7CDGFP2wYVF1LXQoYIFdoESIQM3p0+uiW1welw8+zvDxAL50K75PKTXXtunJADUrksTVpV7mD0pn54vzJRA==}
     peerDependencies:
       '@firebase/app': 0.x
 
@@ -494,20 +494,20 @@ packages:
   '@internationalized/number@3.6.6':
     resolution: {integrity: sha512-iFgmQaXHE0vytNfpLZWOC2mEJCBRzcUxt53Xf/yCXG93lRvqas237i3r7X4RKMwO3txiyZD4mQjKAByFv6UGSQ==}
 
-  '@intlify/core-base@11.4.5':
-    resolution: {integrity: sha512-lja3F/iKVIvTa48mIwmrIeDcQUFZ0F0drvFvT8AwINOvbwnAzl/S/p8p2DxILZpWEUHRi1qewfWNIkMvhD3kKA==}
+  '@intlify/core-base@11.4.6':
+    resolution: {integrity: sha512-EOeHO95XESK9IFHgHeZXunsM/WBAoCA0DlaWODvx14vKmetAuS97t+l6Xe9hTUqntPpF93vtVSjjUDafw3wXMw==}
     engines: {node: '>= 22'}
 
-  '@intlify/devtools-types@11.4.5':
-    resolution: {integrity: sha512-W5vydP9Yq3t82IyWqCM6aR0BTWCZrN5RAwjZEPpH8I2OQWp2RLy03Evh2ANZlSMhcvGAoyDg25k0so85Kwncpw==}
+  '@intlify/devtools-types@11.4.6':
+    resolution: {integrity: sha512-wowQPpNem56b2d43IJmqbrzG2FeBKe5f/kUGlpNuBmXs6OSqncF8m1+1lxHuW8ISZJF0ma2RkW3iLkw0g0G4VA==}
     engines: {node: '>= 22'}
 
-  '@intlify/message-compiler@11.4.5':
-    resolution: {integrity: sha512-IEOZiHtbQopyPc/Dz2M869lOlZYX1SdcniNJwphATDYHhovvIneEKf1EFF37DE7NAABZtza1FNtnwwqZWInfpw==}
+  '@intlify/message-compiler@11.4.6':
+    resolution: {integrity: sha512-5nj3jULqeTAC1WovwMs1LQWgatTa2pM/rXN9T3XW8rdOtXW9ZF6/GLSNFTKDQmPLwclhPdgUWLJ/4w3fMeeC/Q==}
     engines: {node: '>= 22'}
 
-  '@intlify/shared@11.4.5':
-    resolution: {integrity: sha512-g/i5mtdUa9ia/8BaJ4w6ZRHgAXYQd9XyCaQPRMvsd8d5qmZwkjoTmHrNsI28Q/7I8h+2ijUkI4uEnnMCziKupQ==}
+  '@intlify/shared@11.4.6':
+    resolution: {integrity: sha512-m1p1HHAMLhqSpTRH7VnXdrN0CQ4y+9vunFkpLkbD8soIuBsnQdawZXqMCgvwI2UVF9Ww7sVaw7g9tV2VO7shoA==}
     engines: {node: '>= 22'}
 
   '@isaacs/fs-minipass@4.0.1':
@@ -530,13 +530,13 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
-  '@khmyznikov/pwa-install@0.6.3':
-    resolution: {integrity: sha512-1GoPVcltXCZgXa7kovAYqodSWNmUW26RaNoF6KbSGfEZ6r6OLwHrUm/+vYFlDUBaIgYHo5Xi301bN4mG51KZRA==}
+  '@khmyznikov/pwa-install@0.6.4':
+    resolution: {integrity: sha512-Ks80e6Ltzdq0qnz8csuTtIaxjJz0RxPvbi2CBt997g4mm21evq+kRp4ima9lqhFhRCxbwmzBwnu2B3to9lxdhw==}
     peerDependencies:
       '@lit/react': ^1.0.8
       '@types/dom-chromium-installation-events': ^101.0.4
       '@types/web-app-manifest': ^1.0.9
-      lit: ^3.3.1
+      lit: ^3.3.3
 
   '@kurkle/color@0.3.4':
     resolution: {integrity: sha512-M5UknZPHRu3DEDWoipU6sE8PdkZ6Z/S+v4dD+Ke8IaNlpdSQah50lz1KtcFBa2vsdOnwbbnxJwVM4wty6udA5w==}
@@ -552,19 +552,19 @@ packages:
   '@lit/reactive-element@2.1.2':
     resolution: {integrity: sha512-pbCDiVMnne1lYUIaYNN5wrwQXDtHaYtg7YEFPeW+hws6U47WeFvISGUWekPGKWOP1ygrs0ef0o1VJMk1exos5A==}
 
-  '@lucide/vue@1.18.0':
-    resolution: {integrity: sha512-DmnUpDB85PlMZ+ofjZLcKq3JoJnaD1bk7SIj9xwUvqerfNqA6hCLa0/m3gIybH6rdrErABbqvTD8yYJdNqiZ3Q==}
+  '@lucide/vue@1.22.0':
+    resolution: {integrity: sha512-2/+mGF+NrHieiGTwq5wHRVsLhtzoY8x64ovvQkVYDXLrLHKqE/58xR/hveFsxkH0Ey4M8UsvsYNxAHjPgbTyqQ==}
     peerDependencies:
       vue: '>=3.0.1'
 
-  '@napi-rs/wasm-runtime@1.1.4':
-    resolution: {integrity: sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow==}
+  '@napi-rs/wasm-runtime@1.1.5':
+    resolution: {integrity: sha512-AWPoBRJ9tsnVhor4sjO7rkni+7p+2IAEFj6cx06UgP10jkQHqay/36uRV/bFkgrh18D9vb4cr8Q0Pthskgzy+Q==}
     peerDependencies:
       '@emnapi/core': ^1.7.1
       '@emnapi/runtime': ^1.7.1
 
-  '@oxc-project/types@0.133.0':
-    resolution: {integrity: sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA==}
+  '@oxc-project/types@0.137.0':
+    resolution: {integrity: sha512-WT+Gb24i8hmvo85AIv2oEYouEXkRlKAlT9WaCa3TfLgNCN+GhrJOGZuIlMouAh38Qe4QOx26eUOVsq70qXrywA==}
 
   '@pinojs/redact@0.4.0':
     resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
@@ -599,97 +599,97 @@ packages:
   '@protobufjs/utf8@1.1.1':
     resolution: {integrity: sha512-oOAWABowe8EAbMyWKM0tYDKi8Yaox52D+HWZhAIJqQXbqe0xI/GV7FhLWqlEKreMkfDjshR5FKgi3mnle0h6Eg==}
 
-  '@rolldown/binding-android-arm64@1.0.3':
-    resolution: {integrity: sha512-454rs7jHngixp/NMxd5srYD57OnzSlZ/eFTETjORQHLwJG1lRtmNOJcBerZlfu4GjKqeq8aCCIQrMdHyhI51Hw==}
+  '@rolldown/binding-android-arm64@1.1.2':
+    resolution: {integrity: sha512-2cZ+7xRS+DBcuJBJKnfzsbleumJhBqSlJVpuzHC0nTqfd3QQ7Vx2/x5YR/D7cBamKSeWplwo82Fn9lqYUDEMfA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [android]
 
-  '@rolldown/binding-darwin-arm64@1.0.3':
-    resolution: {integrity: sha512-PcAhP+ynjURNyy8SKGl5DQP94aGuB/7JrXJb/t7P+hanXvQVMWzUvRRhBAcg/lNRadBhoUPqSoP4xw5tR/KBEA==}
+  '@rolldown/binding-darwin-arm64@1.1.2':
+    resolution: {integrity: sha512-RkPMJnygxsgOYdkfqgpwY0/Fzm8d0VQe6HGU2/B00Xa9eqdLbrII+DOKAodbJAn3ZL1AJxGHkZRPYazgGY6Ljw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [darwin]
 
-  '@rolldown/binding-darwin-x64@1.0.3':
-    resolution: {integrity: sha512-9YpfeUvSE2RS7wysJ81uOZkXJz7f7Q55H2Gvp3VEw/EsahqDtrphrZ0EwDLK5vvKOzaCrBsjF8JmnMLcUt78Gg==}
+  '@rolldown/binding-darwin-x64@1.1.2':
+    resolution: {integrity: sha512-Uiczh6vFhwyfd7WNe7Q7mCA4KxAiLdz7jPE/WGizfRpIieoyFuNVMmM8HqZ9HwudTkY6/AeMQwlNJ9NJijguWw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [darwin]
 
-  '@rolldown/binding-freebsd-x64@1.0.3':
-    resolution: {integrity: sha512-yB1IlAsSNHncV6SCTL27/MVGR5htvQsoGxIv5KMGXALp+Ll1wYsn+x98M9MW7qa+NdSbvrrY7ANI4wLJ0n1e6g==}
+  '@rolldown/binding-freebsd-x64@1.1.2':
+    resolution: {integrity: sha512-+TpdtTRgHiJFjCVFbw311SuLk3KfytPOQQn+VlAEv+gBxYPtL7E6JS9e/tk+8CwxhIZvemJKo4rTKgfWNsKkkA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [freebsd]
 
-  '@rolldown/binding-linux-arm-gnueabihf@1.0.3':
-    resolution: {integrity: sha512-Yi30IVAAfLUCy2MseFjbB1jAMDl1VMCAas5StnYp8da9+CKvMd2H2cbEjWcw5NPaPqzvYkVIaF1nNUG+b7u/sw==}
+  '@rolldown/binding-linux-arm-gnueabihf@1.1.2':
+    resolution: {integrity: sha512-4lv1/tkmi7ueIVHnyreaOeUpiZP26BH9rRy6hoYfR9310A2B9nUEVRDvBx69vx64Nr3eTPPRkyciqJJs+j9Jmw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@rolldown/binding-linux-arm64-gnu@1.0.3':
-    resolution: {integrity: sha512-jsO7R8To+AdlYgUmN5sHSCZbfhtMBkO0WUx8iORQnPcMMdgr7qM2DQmMwgabs3GhNztdmoKkMKQFHD6DTMCIQw==}
+  '@rolldown/binding-linux-arm64-gnu@1.1.2':
+    resolution: {integrity: sha512-gBSUVO0eaWgw1JMjK3gB8BMlX2Mk148s2lTiVT3e9vjVxbl7UDfMWWY8CfIaaqiXuM9fVTMxIpUz6CAo/B6Vlw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-arm64-musl@1.0.3':
-    resolution: {integrity: sha512-VWkUHwWriDciit80wleYwKILoR/KMvxh/IdwS/paX+ZgpuRpCrKLUdadJbc0NpBEiyhpYawsJ73j9aCvOH+f7Q==}
+  '@rolldown/binding-linux-arm64-musl@1.1.2':
+    resolution: {integrity: sha512-LjQP/iZLBu8o8PjIfk4x3At0/mT6h282pvz8Z5LAyhGbu/kDezyO7ea62rF5uoqmgnIYqbN/MqJ3Si3Aymi7xQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@rolldown/binding-linux-ppc64-gnu@1.0.3':
-    resolution: {integrity: sha512-5f1laC0SlIR0yDbFCd8acUhvJIag6N3zC5P7oUPN6wX0aOma+uKJ0wBDH5aq7I1PVI2ttTlhJwzwRIBnLiSGEg==}
+  '@rolldown/binding-linux-ppc64-gnu@1.1.2':
+    resolution: {integrity: sha512-X/7bVLWelEsbyWDUSXt7zVsTniLLPIY2n1rH58qr78l9i7MNbbxBWD8gI2vRfBWf4NUXJCUuQnfZDsp32LqsfQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-s390x-gnu@1.0.3':
-    resolution: {integrity: sha512-Iq4ko0r4XsgbrF/LunNgHtAGLRRVE2kXonAXQ/MV0mC6jQpMOhW1SvtZja2EhC/kd05++bP78dsqBeIQyYJ6Yg==}
+  '@rolldown/binding-linux-s390x-gnu@1.1.2':
+    resolution: {integrity: sha512-gb6dYKW/1KDorGXyy48glEBJs/sxVSC5pcVrox/pFGV4mvwSFeg2sK5L2tRkVsVlh7kueqOgg4GEcuipJcGuKg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-x64-gnu@1.0.3':
-    resolution: {integrity: sha512-B8m6tD5+/N5FeNQFbKlLA/2yVq9ycQP1SeedyEYYKWBNR3ZQbkvIUcNnDNM03lO1l5F2roiiFJGgvoLLyZXtSg==}
+  '@rolldown/binding-linux-x64-gnu@1.1.2':
+    resolution: {integrity: sha512-JY4w85pU3iAiJVMh5nuk4/Mh9GjMsupe8MrIN53rwxAZW64GKrWeJBuN6SxQg9QTU5uB1cxyhDzW8jqRn1EABw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-x64-musl@1.0.3':
-    resolution: {integrity: sha512-pSdpdUJHkuCxun9LE7jvgUB9qsRgaiyNNCX7m/AvHTcq67AiT/Yhoxvw5zPfhrM8k/BfP8ce/hMOpthKDpEUow==}
+  '@rolldown/binding-linux-x64-musl@1.1.2':
+    resolution: {integrity: sha512-xvpA7o5KCYLB0Rwscmuylb1/zHHSUx4g4xilm4prC5jP76pEUlzBmMbgpbh7bVDbId4NcfT96gN5i6mE6UDaiw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@rolldown/binding-openharmony-arm64@1.0.3':
-    resolution: {integrity: sha512-OXXS3RKJgX2uLwM+gYyuH5omcH8fL1LJs96pZGgtetVCahON57+d4SJHzTgZiOjxgGkSnpXpOsWuPDGAKAigEg==}
+  '@rolldown/binding-openharmony-arm64@1.1.2':
+    resolution: {integrity: sha512-p/ts6KBLjuk49Bp21XH77poQGt02iNz7ChgHep7tudPOaLinR/De/RHdxF8w8Yj4r/bF/bqXwH6PZrB2sA+Nvw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [openharmony]
 
-  '@rolldown/binding-wasm32-wasi@1.0.3':
-    resolution: {integrity: sha512-JTtb8BWFynicNSoPrehsCzBtOKjZ6jhMiPFEmOiuXg1Fl8dn2KHQob+GuPSGR0dryQa1PQJbzjF3dqO/whhjLg==}
+  '@rolldown/binding-wasm32-wasi@1.1.2':
+    resolution: {integrity: sha512-VMu/wmrZ9hJzYlRhbw7jK5PODlugyKZ5mOdX78+lS8OvuFkWNQdz1pFLrI2p3P0pjXOmUZ7B48o5VnMH9QOGtg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [wasm32]
 
-  '@rolldown/binding-win32-arm64-msvc@1.0.3':
-    resolution: {integrity: sha512-gEdFFEN70A/jxb2svrWsN3aDL7OUtmvlOy+6fa2jxG8K0wQ1ZbdeLGnidov6Yu5/733dI5ySfzFlQ/cb0bSz1g==}
+  '@rolldown/binding-win32-arm64-msvc@1.1.2':
+    resolution: {integrity: sha512-xtUJqs8qEkuSviS0n1tsohaPuz3a1SPhZywOji4Oo+sgrJs8daEDMZ0QtqL0OS7dx8PoVpg2J/ZZycPY5I2+Zg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [win32]
 
-  '@rolldown/binding-win32-x64-msvc@1.0.3':
-    resolution: {integrity: sha512-eXB7CHuaQdqmJcc3koCNtNPmT/bj2gc999kUFgBxG8Ac0NdgXc4rkCHhqrgrhN3zddvvvrgzj1e90SuSfmyIXA==}
+  '@rolldown/binding-win32-x64-msvc@1.1.2':
+    resolution: {integrity: sha512-85YiLQqjUKgSO/Zjnf9e0XIn5Ymrh1fLDWBeAkZqpuBR/3R8TpfoHXuyblqyQrftSSgWO9qpcHN8mkyKsLraoA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [win32]
@@ -700,69 +700,69 @@ packages:
   '@swc/helpers@0.5.21':
     resolution: {integrity: sha512-jI/VAmtdjB/RnI8GTnokyX7Ug8c+g+ffD6QRLa6XQewtnGyukKkKSk3wLTM3b5cjt1jNh9x0jfVlagdN2gDKQg==}
 
-  '@tailwindcss/node@4.3.1':
-    resolution: {integrity: sha512-6NDaqRoAMSXD1mr/RXu0HBvNE9a2n5tHPsxu9XHLws8o4Twes5rBM2205SUUiJ9goAtadrN6xTGX0UDEwp/N4A==}
+  '@tailwindcss/node@4.3.2':
+    resolution: {integrity: sha512-yWP/sqEcBLaD8JuA6zNwxoYKr75qxTioYwlRwekj5Jr/I5GXnoJfjetH/psLUIv74cYTH2lBUEzBkinthoYcBg==}
 
-  '@tailwindcss/oxide-android-arm64@4.3.1':
-    resolution: {integrity: sha512-SVlyf61g374l5cHyg8x9kf5xmLcOaxvOTsbsqDnSsDJaKOEFZ7GCvi84VAVGpxojYOs1+3K6M0UjXfqPU8vmOQ==}
+  '@tailwindcss/oxide-android-arm64@4.3.2':
+    resolution: {integrity: sha512-WHxqIuHpvZ5VtdX6GTl1Ik/Vp2YuN42Et+0CdeaVd/frQ9jAvGmvR8vLT+jk3e8/Q3x8kECB9+R17pgpp2BulA==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [android]
 
-  '@tailwindcss/oxide-darwin-arm64@4.3.1':
-    resolution: {integrity: sha512-hVnWLwv+e/l7c4WKyVtHVrIPvYdqWHjRB3MDIqARynzFtnQg85kmQEFCbV9Ja0VVx4xXTIiDWY60Y7iz/iNoDA==}
+  '@tailwindcss/oxide-darwin-arm64@4.3.2':
+    resolution: {integrity: sha512-GZypeUY/IDJW3877KeM+O67vbXr3MBnbtEL4aYhNErv/JWZhye2vGSWWG9tB6iiqR2MqRNkY8IOUy4NdSZV26w==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [darwin]
 
-  '@tailwindcss/oxide-darwin-x64@4.3.1':
-    resolution: {integrity: sha512-Cf7abu0WVgbhU7ANgPUnSAvm7nCvMweusHb8FnaHlLfv/Caq4GYaEZg7ZImzzmjx4lIAfuS8q+eLIS7A7IzxIg==}
+  '@tailwindcss/oxide-darwin-x64@4.3.2':
+    resolution: {integrity: sha512-UIIzmefR6KO1sDU7MzRqAxC8iBpft/VhkGjTjnhoS6k7Z3rQ9wEgA1ODSiyH/tcSYssulNm4Ci3hOeK1jH7ccQ==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [darwin]
 
-  '@tailwindcss/oxide-freebsd-x64@4.3.1':
-    resolution: {integrity: sha512-ZZqzX2Y+GXtXXfqSfpJhDm60OoZfvLHLCgm+J7NVqgHHJjG/m9ugZI77RwTsVd4fnBJuCFP6Ae6kTJb71UdS8g==}
+  '@tailwindcss/oxide-freebsd-x64@4.3.2':
+    resolution: {integrity: sha512-GN+uAmcI6DNspnCDwtOAZrTz6oukJnp337qZvxqCGLd3BHBzJpO0ZbTLRvJNdztOeAmTzewewGIMPb0tk2R4WA==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [freebsd]
 
-  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.1':
-    resolution: {integrity: sha512-/Ah/xik0LaMYfv9DZ0S/t4pBlBNYOcqtRwusjgovHkvT8ixueWCLyJjsaF5kQIckjb4IT8Q6K6p/iPmZMixYgg==}
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.2':
+    resolution: {integrity: sha512-4ABn7qSbdHRwTiDiuWNegCyb5+2FJ4vKIKc3DmKrvAFw7MU1Lm11dIkTPwUaFdTzc7IsOpDbqBrlh0x6y36U/w==}
     engines: {node: '>= 20'}
     cpu: [arm]
     os: [linux]
 
-  '@tailwindcss/oxide-linux-arm64-gnu@4.3.1':
-    resolution: {integrity: sha512-gqdFoVJlw444GvpnheZLHmvTzSxI/cOUUh2KSNejQjTcYkW062SVD+En0rUgD+QV91bz1XGIGtt1HJd48xUGbQ==}
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.2':
+    resolution: {integrity: sha512-wDgEIGwoM8w8pufh9LVt1PahDgNdKXrLC2qfAnV3vAmococ9RWbxeAw4pxPttd/TsJfwjyLf90Dg1y9y8I6Emw==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@tailwindcss/oxide-linux-arm64-musl@4.3.1':
-    resolution: {integrity: sha512-Bwv9KwOvE0VKa86xPFif9b9c3Y1NxOV1P0gLti/IYaWEsQYZXDlxfGEtA8mdDZ7SG3wyNXAWYT5SIn3giL57oA==}
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.2':
+    resolution: {integrity: sha512-J5Nuk0uZQIiMTJj3LEx4sAA9tMFUoXQZFv1J6An+QGYe53HKRJuFDi0rpq/tuouCZeAbOBY3kQ6g8qeD4TUjtA==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@tailwindcss/oxide-linux-x64-gnu@4.3.1':
-    resolution: {integrity: sha512-Ymi8O8T15HYQdOUWUtTI6ldN0neHP85FC+Qz32xTcZ7iJXtem/x8ITev0o1e9e5rkqj4lONZfTRLvkmin1+tKg==}
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.2':
+    resolution: {integrity: sha512-kqCZpSKOBEJO4mz7OqWoofBZeXTAwaVGPj0ErAj7CojmhKpWVWVOnrt9dE8odoIraZq4oj3ausM37kXi+Tow8w==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@tailwindcss/oxide-linux-x64-musl@4.3.1':
-    resolution: {integrity: sha512-M+P/91qJ6uILLw4k2G93GMDRAXj61SMvFQYt39AqvUqYgExXpLL5aepfns7sj4HiAQeolirQF9E0lzRvdf4zPQ==}
+  '@tailwindcss/oxide-linux-x64-musl@4.3.2':
+    resolution: {integrity: sha512-cixpqbh2toJDmkuCRI68nXA8ZxNmdK9Y+9v5h3MC3ZQKy/0BO8AWzlkWyRM7JAFSGBlfig4YVTPsK6MVgqz1uw==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@tailwindcss/oxide-wasm32-wasi@4.3.1':
-    resolution: {integrity: sha512-zsM8uOeqvVGHsAXsJxsT28ttosFahLJKCLOTUBqRAtKnVgGSRitds9T432QiT8b77Yga7JIBkulIRRlJPtYhRA==}
+  '@tailwindcss/oxide-wasm32-wasi@4.3.2':
+    resolution: {integrity: sha512-4ec2Z/LOmRsAgU23CS4xeJfcJlmRg94A/XrbGRCF1gyU/zdDfRLYDVsS+ynSZCmGNxQ1jQriQOKMQeQxBA3Isw==}
     engines: {node: '>=14.0.0'}
     cpu: [wasm32]
     bundledDependencies:
@@ -773,24 +773,24 @@ packages:
       - '@emnapi/wasi-threads'
       - tslib
 
-  '@tailwindcss/oxide-win32-arm64-msvc@4.3.1':
-    resolution: {integrity: sha512-aiNvSq9BsVk8V513lDKlrCFAgf8qBMPZTpgEhInL+NwQqs97mYmupVMrPrgBBSL8Pv/0zXu9MrMF9rMun1ZeNg==}
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.2':
+    resolution: {integrity: sha512-Zyr/M0+XcYZu3bZrUytc7TXvrk0ftWfl8gN2MwekNDzhqhKRUucMPSeOzM0o0wH5AWOU49BsKRrfKxI2atCPMQ==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [win32]
 
-  '@tailwindcss/oxide-win32-x64-msvc@4.3.1':
-    resolution: {integrity: sha512-xDEyu1rg290472FEGaKHnzyDyh5QH+AlWvsU5hMoMtPpzmKlRI0jaYKCgSHDYtaQWZOYbMaduSyCwFwY4n1HmA==}
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.2':
+    resolution: {integrity: sha512-QI9BO7KlNZsp2GuO0jwAAj5jCDABOKXRkCk2XuKTSaNEFSdfzqswYVTtCHBNKHLsqyjFyFkqlDiwkNbTYSssMQ==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [win32]
 
-  '@tailwindcss/oxide@4.3.1':
-    resolution: {integrity: sha512-yVPyo8RNkabVr3O2EhHEE0Rewu7YKzc1DhIqfL46LKveFrmu9XbDazNOJY7/GRuvw1h6u3utWnR29H/p5JPlgA==}
+  '@tailwindcss/oxide@4.3.2':
+    resolution: {integrity: sha512-z8ZgnzX8gdNoWLBLqBPoh/sjnxkwvf9ZuWjnO0l0yIzbLa5/9S+eC5QxGZKRobVHIC3/1BoMWjHblqWjcgFgag==}
     engines: {node: '>= 20'}
 
-  '@tailwindcss/vite@4.3.1':
-    resolution: {integrity: sha512-hItDHuIIlEV61R+faXu66s1K36aTurO/Qw0e45Vskz57gXl9pWOT6eg3zmcEui6CZXddbN7zd41bwmvag4JGwQ==}
+  '@tailwindcss/vite@4.3.2':
+    resolution: {integrity: sha512-eHpMeX4JXfVNJDEcsouTeCBubJBTcTLigeaw/NTUW6PB5ATKKXdyonnXgTBX2VuRbjz1hjfz6C5XAhr52ImQXA==}
     peerDependencies:
       vite: ^5.2.0 || ^6 || ^7 || ^8
 
@@ -812,8 +812,8 @@ packages:
     peerDependencies:
       vue: ^2.7.0 || ^3.0.0
 
-  '@thumbmarkjs/thumbmarkjs@1.9.1':
-    resolution: {integrity: sha512-Y8dhwoi53uS+dNUy9KGWgLftjY/zZVmenv0+cOZ00z1GKMagAdPmbG8lDMcrwMvYngEPq+7Vr9TQeuy3tmDrjA==}
+  '@thumbmarkjs/thumbmarkjs@1.10.0':
+    resolution: {integrity: sha512-mmIjivwI76Jm1to/VsEzxX+FNRD38HBHV37LmlF6Gg6psclifkVO01KV7UZr+i2d9IboqsTcW33vD1vr3meCeA==}
 
   '@tybys/wasm-util@0.10.2':
     resolution: {integrity: sha512-RoBvJ2X0wuKlWFIjrwffGw1IqZHKQqzIchKaadZZfnNpsAYp2mM0h36JtPCjNDAHGgYez/15uMBpfGwchhiMgg==}
@@ -858,30 +858,30 @@ packages:
       vue:
         optional: true
 
-  '@vue/compiler-core@3.5.35':
-    resolution: {integrity: sha512-BUmHaR1J+O+CKZ9uJucdVTEr1LHsdyvv7vG3eNRhK3CczEHeMd/LtsHAuD7PbrxvI2envCY2v7HI1vC1aBRzKw==}
-
   '@vue/compiler-core@3.5.38':
     resolution: {integrity: sha512-s99aGxWYig9ErHbct27KXEGhrBYlRI6c4MwAgXErOAbX9xiW37/uMa+XUDO69zLz83dng8UUZ70CTOJrLrYrEQ==}
 
-  '@vue/compiler-dom@3.5.35':
-    resolution: {integrity: sha512-k+bprkXxuqhVajgTx5mUHuir7TwQzUKOWR40ng1ncAqQRPnrLngGGgqVEEhOnTMlc8btHYVKmrP8s5Qyg0hvYA==}
+  '@vue/compiler-core@3.5.39':
+    resolution: {integrity: sha512-16KBTEXAJCpDr0mwlw+AZyhu8iyC7R3S2vBwsI7QnWJU6X3WKc9VKeNEZpiMdZ569qWhz9574L3vV55qRL0Vtw==}
 
   '@vue/compiler-dom@3.5.38':
     resolution: {integrity: sha512-JTqp25l8aFfJYF7/KmsXZjAxJz7T+SjmTJLoXVjHtc2BrSgSiW2n9Aem/cWq1OPe68A8JL06B3eVdhlP0H4TVw==}
 
-  '@vue/compiler-sfc@3.5.35':
-    resolution: {integrity: sha512-G5VPMcXTSywXBgtFOZOnHKBxKSrwXUcvY1iaF5/hRcy7t0J6CH/d8ha9F4nzi00Fax1eLV0QHM7v4mQu68jydw==}
+  '@vue/compiler-dom@3.5.39':
+    resolution: {integrity: sha512-oQPigALqYbNxTNPvNgSOe+czwVExfbVF02lz8jP0S3AXJiu3jxYDygNUiqSep4ezzW8XgnubqH63My2A7JR/vg==}
 
   '@vue/compiler-sfc@3.5.38':
     resolution: {integrity: sha512-DuA2GiZawSEW442iw/9+Fkol8hTgb4Ke5KkhmSry65QA7YuyMbIdy8p0XZRMvNwJdgRz307W8g1CSzdvS4nuNg==}
 
-  '@vue/compiler-ssr@3.5.35':
-    resolution: {integrity: sha512-rGhAeXgdM7/ffTJGXT69rCCdTmjDewnFuUZfBQQHTdcEBeWdT5HCGY60y2ytLJr9/Dsu7IntUi5z/w0h6Rjnzw==}
+  '@vue/compiler-sfc@3.5.39':
+    resolution: {integrity: sha512-d0ki86iOyN8LoZPBmk5SJWNwHP19CnDDCfuo//+2WJa2g5Ke0Jay983PIBIcSSzldC68I8DrD5GrHV3OSDfodg==}
 
   '@vue/compiler-ssr@3.5.38':
     resolution: {integrity: sha512-7s+W5Gc42FGxZMcuwl8H5B29T8BJPMdBT7KHFE+BbAuZ/iTEdTtv7z2XiMjiaUUw4w3ZcCEdHs36RuYJ2VA7bA==}
 
+  '@vue/compiler-ssr@3.5.39':
+    resolution: {integrity: sha512-Ce7/wvwMHai74bdszfXExdazFigYnlF9zgCmEQUcM1j0fOymlouZ7XilTYNo8oUjhlnjYOZbGrcYKuqjz89Ucw==}
+
   '@vue/devtools-api@6.6.4':
     resolution: {integrity: sha512-sGhTPMuXqZ1rVOk32RylztWkfXTRhuS7vgAKv0zjqk8gbsHkJ7xfFf+jbySxt7tWObEJwyKaHMikV/WGDiQm8g==}
 
@@ -903,26 +903,26 @@ packages:
   '@vue/devtools-shared@8.1.2':
     resolution: {integrity: sha512-X9RyVFYAdkBe4IUf5v48TxBF/6QPmF8CmWrDAjXzfUHrgQ/HGfTC1A6TqgXqZ03ye66l3AD51BAGD69IvKM9sw==}
 
-  '@vue/reactivity@3.5.38':
-    resolution: {integrity: sha512-pG6LV/NDNRbKizcUjFFLAfjaL8mcv4DmR9avNcUw2gDHBzZneuS2TWCmp633ynzxz9YYKNeEPK2I8Wraqy2HUQ==}
+  '@vue/reactivity@3.5.39':
+    resolution: {integrity: sha512-TpsuBJ9gGlZa5d23XcM2y8EXanz9dZeVDQBXRwzy46ItgvM+rWpzs+UVM0wcRLxGvcav0HE5jz2gNL53xlRAog==}
 
-  '@vue/runtime-core@3.5.38':
-    resolution: {integrity: sha512-iyW8WVfF1CpCXxncZY5Ei6rSd6oZr5DgEom//fUjRBRl56AXPD+s9ATvukRt77ZFTuYlnVA1bxY+dJB94tWVYw==}
+  '@vue/runtime-core@3.5.39':
+    resolution: {integrity: sha512-9GLtNyRvPAUMbX+7ono0RC2j0guo2LXVi8LvcmAooImACUKm0oFf0jjwbX8/H0AE/t1nxhAkn8RSl9PMCzzxZw==}
 
-  '@vue/runtime-dom@3.5.38':
-    resolution: {integrity: sha512-apX2wt9sdfDshS+a2xueFZLVpt0GkRJZSoPmrW/SA4yzXTznhfcMVW59gr7h4YQeY0vJhdJkk2rsIDwgfFgC5A==}
+  '@vue/runtime-dom@3.5.39':
+    resolution: {integrity: sha512-7Y6aAGboKcXAZ3ECuUy7RrS5yy2r47dhTp2SKaJmYxjopImaVFaNa5Ne66NwGovsrxVAl5S5rwc7m22UG7Lmww==}
 
-  '@vue/server-renderer@3.5.38':
-    resolution: {integrity: sha512-vue8vbf2QlV4quHqzwmJy6dWfmRhP1J8l4wtZg60CL6VoKqcPY2oe7may3+1d9qfpedjK5PRLFqd5k3Isj9mUw==}
+  '@vue/server-renderer@3.5.39':
+    resolution: {integrity: sha512-yZSakiAGw85rZfG7UM8akMnIF+FmeiNk47uvHf2nVBBSe+dIKUhZuZq9+XgJhbV3nS5Z4ALH23/MpXofW+mbcw==}
     peerDependencies:
-      vue: 3.5.38
-
-  '@vue/shared@3.5.35':
-    resolution: {integrity: sha512-zSbjL7gRXwks2ZQLRGCajBtBXEOXW9Ddhn/HvSdrGkE2dqGnumzW8XtusRrxrE9LvqtiqDXQ+A60Hp6mvdYxfA==}
+      vue: 3.5.39
 
   '@vue/shared@3.5.38':
     resolution: {integrity: sha512-FTW0AFZNaK5/mOqvGBwVfUlNLU38TiQn4+DQgIFUnrBBJQ1crMJ82yeGQLV5jyKFsO8yRukpbuP7x+nRbH6aug==}
 
+  '@vue/shared@3.5.39':
+    resolution: {integrity: sha512-l1rrBtBfTnmxvtsvdQDXltUUy8S1Y+ZaqdfUzmAnJkTd8Z8rv5v/ytW+TKiqEOWyHPoqtPlNFSs0lhRmYVSHVA==}
+
   '@vueuse/core@10.11.1':
     resolution: {integrity: sha512-guoy26JQktXPcz+0n3GukWIy/JDNKti9v6VEMu6kV2sYBsWuGiTU8OWdg+ADfUbHg3/3DlqySDe7JmdHrktiww==}
 
@@ -1083,8 +1083,8 @@ packages:
     resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
     engines: {node: '>=6'}
 
-  code-inspector-plugin@1.6.0:
-    resolution: {integrity: sha512-pH5sQoL5VGKXo92yimfzdF8yHWGU3hC8uA8kovLR3EB0WSJ7TfC+AZaPryLI2n5F2dSWUgaCv5zuoNvDvKHQBQ==}
+  code-inspector-plugin@1.6.3:
+    resolution: {integrity: sha512-4wLzo9eNcintA8wHhD5jBu7D+NZmvtq9BUKqXY996jGUR+dIj8CGNB65OV73fHc1hxXjNh5cJ0usPfvU3aYZaw==}
 
   color-convert@2.0.1:
     resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
@@ -1281,8 +1281,8 @@ packages:
     resolution: {integrity: sha512-/t88Ty3d5JWQbWYgaOGCCYfXRwV1+be02WqYYlL6h0lEiUAMPM8o8qKGO01YIkOHzka2up08wvgYD0mDiI+q3Q==}
     engines: {node: '>= 0.8'}
 
-  firebase@12.14.0:
-    resolution: {integrity: sha512-aEZ/lniDR1hOCYpx/x/V8Nrrqq9pepKDNkqP/4WGZFC69gTv6F59Z4/54W/SUP4L/hFlrRNmWj35aweQq+IHow==}
+  firebase@12.15.0:
+    resolution: {integrity: sha512-p0YTLcRSTiBXMx9sGr4ZNSfLjc/RVBEw4C/TXjVMtw65+6E1Pbm47UY3F4/AqRoDobEcNX3gsbPGy7jPjxbgSQ==}
 
   forwarded@0.2.0:
     resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
@@ -1362,8 +1362,8 @@ packages:
   http-parser-js@0.5.10:
     resolution: {integrity: sha512-Pysuw9XpUq5dVc/2SMHpuTY01RFl8fttgcyunjL7eEMhGM3cI4eOmiCycJDVCo/7O7ClfQD3SaI6ftDzqOXYMA==}
 
-  http-proxy-middleware@4.1.0:
-    resolution: {integrity: sha512-XUOAjKncPZjsrgDTTem+CUED6A+piUAKTOwBM8g1gAublBX/GdxTHP8mO+og1EW1evYP8wd0G2c111tExwo/jw==}
+  http-proxy-middleware@4.1.1:
+    resolution: {integrity: sha512-KX5ZofGXLFXqFAkQoOWZ+rTtaLTut7m0gyL+QzJrdejtIZ+F4bPPDoe7reISg2+v0CAz5OfVwEJEhty7X+e57g==}
     engines: {node: ^22.15.0 || ^24.0.0 || >=26.0.0}
 
   httpxy@0.5.3:
@@ -1772,6 +1772,9 @@ packages:
     resolution: {integrity: sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==}
     engines: {node: '>= 0.10'}
 
+  re2js@0.4.3:
+    resolution: {integrity: sha512-EuNmh7jurhHEE8Ge/lBo9JuMLb3qf866Xjjfyovw3wPc7+hlqDkZq4LwhrCQMEI+ARWfrKrHozEndzlpNT0WDg==}
+
   readdirp@3.6.0:
     resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==}
     engines: {node: '>=8.10.0'}
@@ -1784,8 +1787,8 @@ packages:
     resolution: {integrity: sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==}
     engines: {node: '>= 12.13.0'}
 
-  reka-ui@2.9.10:
-    resolution: {integrity: sha512-yuvZVTp4fWH2G3qk+ze/x6YYlyc2Xl1d+eMUlIYrKqzTowBKteoDoN17fitURmqSUck3mc7JbcYgp49DnGu2EQ==}
+  reka-ui@2.10.1:
+    resolution: {integrity: sha512-drcOQ4rQtDYAcGCsyQBqQg8QQ+H3B+zDaMJU0h8KPEPMa7g9BHu3zcOi4OB39XJSWizceFoNO0Z9tctSGLOXqg==}
     peerDependencies:
       vue: '>= 3.4.0'
 
@@ -1796,8 +1799,8 @@ packages:
   rfdc@1.4.1:
     resolution: {integrity: sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==}
 
-  rolldown@1.0.3:
-    resolution: {integrity: sha512-i00lAJ2ks1BYr7rjNjKC7BcqAS7nVfiT3QX1SI5aY+AFHblCmaUf9OE9dbdzDvW6dJxbi2ZCZiy9v3CcwOiX3g==}
+  rolldown@1.1.2:
+    resolution: {integrity: sha512-x0CrQQqCXWGeI8dTvFfN/Dnv3yMKT9hv5jFjlOreKAx9wqLq9wz7VvLLHyaAXC90/CpggTu9SisSbsJJTPSjNQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
 
@@ -1928,15 +1931,15 @@ packages:
   tailwind-merge@3.6.0:
     resolution: {integrity: sha512-uxL7qAVQriqRQPAyK3pj66VqskWqoZ37PW94jwOTwNfq/z9oyu1V+eqrZqtR2+fCiXdYOZe/Modt8GtvqNzu+w==}
 
-  tailwindcss@4.3.1:
-    resolution: {integrity: sha512-hk+TB1m+K8CYNrP6rjQaq/Y+4Zylwpa87mLYBKCunwnnQ9p+fHb7kmSfGqyEJoxF/O6CDyABWVFEafNSYKll+Q==}
+  tailwindcss@4.3.2:
+    resolution: {integrity: sha512-WtctNNSH8A9jlMIqxzuYumOHU5uGZyRv0Q5svQl+oEPy5w84YpBxdb7MdqyiSPQge5jTJ6zFQLq0PFygdccSBA==}
 
   tapable@2.3.3:
     resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
     engines: {node: '>=6'}
 
-  tar@7.5.16:
-    resolution: {integrity: sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==}
+  tar@7.5.19:
+    resolution: {integrity: sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==}
     engines: {node: '>=18'}
 
   thread-stream@4.0.0:
@@ -2031,13 +2034,13 @@ packages:
   vconsole@3.15.1:
     resolution: {integrity: sha512-KH8XLdrq9T5YHJO/ixrjivHfmF2PC2CdVoK6RWZB4yftMykYIaXY1mxZYAic70vADM54kpMQF+dYmvl5NRNy1g==}
 
-  vite@8.0.16:
-    resolution: {integrity: sha512-h9bXPmJichP5fLmVQo3PyaGSDE2n3aPuomeAlVRm0JLmt4rY6zmPKd59HYI4LNW8oTK7tlTsuC7l/m7awx9Jcw==}
+  vite@8.1.0:
+    resolution: {integrity: sha512-BuJcQK/56NQTWDGn4ABea3q4SSBdNPWwNZKTkkUpcMPnLoquSYH8llRtSUIgoL1KSCpHt5eghLShn50mH36y7Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
       '@types/node': ^20.19.0 || >=22.12.0
-      '@vitejs/devtools': ^0.1.18
+      '@vitejs/devtools': ^0.3.0
       esbuild: ^0.27.0 || ^0.28.0
       jiti: '>=1.21.0'
       less: ^4.0.0
@@ -2085,8 +2088,8 @@ packages:
       '@vue/composition-api':
         optional: true
 
-  vue-i18n@11.4.5:
-    resolution: {integrity: sha512-rm8YJ6RpjOrkcgS2GLrZwLvs/VbhxbTSuEspbyXDo233+fPK0OMFNLOj3fdQYVKdOgcpSfLW91JhbqgpkkcBWA==}
+  vue-i18n@11.4.6:
+    resolution: {integrity: sha512-l0gE7Rfy0phCa5ChKYkOq543Wgd39BCK6hkktfr1Ed4D99oRkgPK9ffShASZdeC8OJxGfdWmpYoAaAH6iLEuIg==}
     engines: {node: '>= 22'}
     peerDependencies:
       vue: ^3.0.0
@@ -2128,8 +2131,8 @@ packages:
       nuxt:
         optional: true
 
-  vue@3.5.38:
-    resolution: {integrity: sha512-vAMKHfImQlYSy0C+PBue4s3ERZ2xGKfgZg5GXAsLInq1dyh2H78ILVP5sK0KPFPVW4kv+OGCIvBEondcjpZp7A==}
+  vue@3.5.39:
+    resolution: {integrity: sha512-xmZCYabFGcirU8r0fTuvl/LICc1OU620rnqepaJDL/a141ZigkG7AyaxQLdqJ02ZRYzWe6YPaDHeQx7MfknQfA==}
     peerDependencies:
       typescript: '*'
     peerDependenciesMeta:
@@ -2248,9 +2251,9 @@ snapshots:
 
   '@cloudflare/speedtest@1.10.1': {}
 
-  '@code-inspector/core@1.6.0':
+  '@code-inspector/core@1.6.3':
     dependencies:
-      '@vue/compiler-dom': 3.5.35
+      '@vue/compiler-dom': 3.5.39
       chalk: 4.1.2
       dotenv: 16.6.1
       launch-ide: 1.4.3
@@ -2258,57 +2261,57 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@code-inspector/esbuild@1.6.0':
+  '@code-inspector/esbuild@1.6.3':
     dependencies:
-      '@code-inspector/core': 1.6.0
+      '@code-inspector/core': 1.6.3
     transitivePeerDependencies:
       - supports-color
 
-  '@code-inspector/mako@1.6.0':
+  '@code-inspector/mako@1.6.3':
     dependencies:
-      '@code-inspector/core': 1.6.0
+      '@code-inspector/core': 1.6.3
     transitivePeerDependencies:
       - supports-color
 
-  '@code-inspector/turbopack@1.6.0':
+  '@code-inspector/turbopack@1.6.3':
     dependencies:
-      '@code-inspector/core': 1.6.0
-      '@code-inspector/webpack': 1.6.0
+      '@code-inspector/core': 1.6.3
+      '@code-inspector/webpack': 1.6.3
     transitivePeerDependencies:
       - supports-color
 
-  '@code-inspector/vite@1.6.0':
+  '@code-inspector/vite@1.6.3':
     dependencies:
-      '@code-inspector/core': 1.6.0
+      '@code-inspector/core': 1.6.3
       chalk: 4.1.1
     transitivePeerDependencies:
       - supports-color
 
-  '@code-inspector/webpack@1.6.0':
+  '@code-inspector/webpack@1.6.3':
     dependencies:
-      '@code-inspector/core': 1.6.0
+      '@code-inspector/core': 1.6.3
     transitivePeerDependencies:
       - supports-color
 
-  '@emnapi/core@1.10.0':
+  '@emnapi/core@1.11.1':
     dependencies:
-      '@emnapi/wasi-threads': 1.2.1
+      '@emnapi/wasi-threads': 1.2.2
       tslib: 2.8.1
     optional: true
 
-  '@emnapi/runtime@1.10.0':
+  '@emnapi/runtime@1.11.1':
     dependencies:
       tslib: 2.8.1
     optional: true
 
-  '@emnapi/wasi-threads@1.2.1':
+  '@emnapi/wasi-threads@1.2.2':
     dependencies:
       tslib: 2.8.1
     optional: true
 
-  '@firebase/ai@2.13.0(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)':
+  '@firebase/ai@2.13.1(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/app-check-interop-types': 0.3.4
       '@firebase/app-types': 0.9.5
       '@firebase/component': 0.7.3
@@ -2316,11 +2319,11 @@ snapshots:
       '@firebase/util': 1.15.1
       tslib: 2.8.1
 
-  '@firebase/analytics-compat@0.2.28(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)':
+  '@firebase/analytics-compat@0.2.28(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/analytics': 0.10.22(@firebase/app@0.14.13)
+      '@firebase/analytics': 0.10.22(@firebase/app@0.15.0)
       '@firebase/analytics-types': 0.8.4
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2329,20 +2332,20 @@ snapshots:
 
   '@firebase/analytics-types@0.8.4': {}
 
-  '@firebase/analytics@0.10.22(@firebase/app@0.14.13)':
+  '@firebase/analytics@0.10.22(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
-      '@firebase/installations': 0.6.22(@firebase/app@0.14.13)
+      '@firebase/installations': 0.6.22(@firebase/app@0.15.0)
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
       tslib: 2.8.1
 
-  '@firebase/app-check-compat@0.4.4(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)':
+  '@firebase/app-check-compat@0.4.5(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-check': 0.11.4(@firebase/app@0.14.13)
+      '@firebase/app-check': 0.12.0(@firebase/app@0.15.0)
       '@firebase/app-check-types': 0.5.4
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
@@ -2354,17 +2357,17 @@ snapshots:
 
   '@firebase/app-check-types@0.5.4': {}
 
-  '@firebase/app-check@0.11.4(@firebase/app@0.14.13)':
+  '@firebase/app-check@0.12.0(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
       tslib: 2.8.1
 
-  '@firebase/app-compat@0.5.13':
+  '@firebase/app-compat@0.5.14':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
@@ -2374,7 +2377,7 @@ snapshots:
     dependencies:
       '@firebase/logger': 0.5.1
 
-  '@firebase/app@0.14.13':
+  '@firebase/app@0.15.0':
     dependencies:
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
@@ -2382,10 +2385,10 @@ snapshots:
       idb: 7.1.1
       tslib: 2.8.1
 
-  '@firebase/auth-compat@0.6.7(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)':
+  '@firebase/auth-compat@0.6.8(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
-      '@firebase/auth': 1.13.2(@firebase/app@0.14.13)
+      '@firebase/app-compat': 0.5.14
+      '@firebase/auth': 1.13.3(@firebase/app@0.15.0)
       '@firebase/auth-types': 0.13.1(@firebase/app-types@0.9.5)(@firebase/util@1.15.1)
       '@firebase/component': 0.7.3
       '@firebase/util': 1.15.1
@@ -2402,9 +2405,9 @@ snapshots:
       '@firebase/app-types': 0.9.5
       '@firebase/util': 1.15.1
 
-  '@firebase/auth@1.13.2(@firebase/app@0.14.13)':
+  '@firebase/auth@1.13.3(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
@@ -2415,9 +2418,9 @@ snapshots:
       '@firebase/util': 1.15.1
       tslib: 2.8.1
 
-  '@firebase/data-connect@0.7.1(@firebase/app@0.14.13)':
+  '@firebase/data-connect@0.7.1(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/auth-interop-types': 0.2.5
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
@@ -2448,11 +2451,11 @@ snapshots:
       faye-websocket: 0.11.4
       tslib: 2.8.1
 
-  '@firebase/firestore-compat@0.4.10(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)':
+  '@firebase/firestore-compat@0.4.11(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
-      '@firebase/firestore': 4.15.0(@firebase/app@0.14.13)
+      '@firebase/firestore': 4.16.0(@firebase/app@0.15.0)
       '@firebase/firestore-types': 3.0.4(@firebase/app-types@0.9.5)(@firebase/util@1.15.1)
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2465,22 +2468,23 @@ snapshots:
       '@firebase/app-types': 0.9.5
       '@firebase/util': 1.15.1
 
-  '@firebase/firestore@4.15.0(@firebase/app@0.14.13)':
+  '@firebase/firestore@4.16.0(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
       '@firebase/webchannel-wrapper': 1.0.6
       '@grpc/grpc-js': 1.9.15
       '@grpc/proto-loader': 0.7.15
+      re2js: 0.4.3
       tslib: 2.8.1
 
-  '@firebase/functions-compat@0.4.5(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)':
+  '@firebase/functions-compat@0.4.5(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
-      '@firebase/functions': 0.13.5(@firebase/app@0.14.13)
+      '@firebase/functions': 0.13.5(@firebase/app@0.15.0)
       '@firebase/functions-types': 0.6.4
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2489,9 +2493,9 @@ snapshots:
 
   '@firebase/functions-types@0.6.4': {}
 
-  '@firebase/functions@0.13.5(@firebase/app@0.14.13)':
+  '@firebase/functions@0.13.5(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/app-check-interop-types': 0.3.4
       '@firebase/auth-interop-types': 0.2.5
       '@firebase/component': 0.7.3
@@ -2499,11 +2503,11 @@ snapshots:
       '@firebase/util': 1.15.1
       tslib: 2.8.1
 
-  '@firebase/installations-compat@0.2.22(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)':
+  '@firebase/installations-compat@0.2.22(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
-      '@firebase/installations': 0.6.22(@firebase/app@0.14.13)
+      '@firebase/installations': 0.6.22(@firebase/app@0.15.0)
       '@firebase/installations-types': 0.5.4(@firebase/app-types@0.9.5)
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2515,9 +2519,9 @@ snapshots:
     dependencies:
       '@firebase/app-types': 0.9.5
 
-  '@firebase/installations@0.6.22(@firebase/app@0.14.13)':
+  '@firebase/installations@0.6.22(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
       '@firebase/util': 1.15.1
       idb: 7.1.1
@@ -2527,11 +2531,11 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
-  '@firebase/messaging-compat@0.2.27(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)':
+  '@firebase/messaging-compat@0.2.27(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
-      '@firebase/messaging': 0.13.0(@firebase/app@0.14.13)
+      '@firebase/messaging': 0.13.0(@firebase/app@0.15.0)
       '@firebase/util': 1.15.1
       tslib: 2.8.1
     transitivePeerDependencies:
@@ -2539,22 +2543,22 @@ snapshots:
 
   '@firebase/messaging-interop-types@0.2.5': {}
 
-  '@firebase/messaging@0.13.0(@firebase/app@0.14.13)':
+  '@firebase/messaging@0.13.0(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
-      '@firebase/installations': 0.6.22(@firebase/app@0.14.13)
+      '@firebase/installations': 0.6.22(@firebase/app@0.15.0)
       '@firebase/messaging-interop-types': 0.2.5
       '@firebase/util': 1.15.1
       idb: 7.1.1
       tslib: 2.8.1
 
-  '@firebase/performance-compat@0.2.25(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)':
+  '@firebase/performance-compat@0.2.25(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
-      '@firebase/performance': 0.7.12(@firebase/app@0.14.13)
+      '@firebase/performance': 0.7.12(@firebase/app@0.15.0)
       '@firebase/performance-types': 0.2.4
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2563,22 +2567,22 @@ snapshots:
 
   '@firebase/performance-types@0.2.4': {}
 
-  '@firebase/performance@0.7.12(@firebase/app@0.14.13)':
+  '@firebase/performance@0.7.12(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
-      '@firebase/installations': 0.6.22(@firebase/app@0.14.13)
+      '@firebase/installations': 0.6.22(@firebase/app@0.15.0)
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
       tslib: 2.8.1
       web-vitals: 4.2.4
 
-  '@firebase/remote-config-compat@0.2.25(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)':
+  '@firebase/remote-config-compat@0.2.26(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
       '@firebase/logger': 0.5.1
-      '@firebase/remote-config': 0.8.4(@firebase/app@0.14.13)
+      '@firebase/remote-config': 0.8.5(@firebase/app@0.15.0)
       '@firebase/remote-config-types': 0.5.1
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2587,20 +2591,20 @@ snapshots:
 
   '@firebase/remote-config-types@0.5.1': {}
 
-  '@firebase/remote-config@0.8.4(@firebase/app@0.14.13)':
+  '@firebase/remote-config@0.8.5(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
-      '@firebase/installations': 0.6.22(@firebase/app@0.14.13)
+      '@firebase/installations': 0.6.22(@firebase/app@0.15.0)
       '@firebase/logger': 0.5.1
       '@firebase/util': 1.15.1
       tslib: 2.8.1
 
-  '@firebase/storage-compat@0.4.3(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)':
+  '@firebase/storage-compat@0.4.3(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app-compat': 0.5.13
+      '@firebase/app-compat': 0.5.14
       '@firebase/component': 0.7.3
-      '@firebase/storage': 0.14.3(@firebase/app@0.14.13)
+      '@firebase/storage': 0.14.3(@firebase/app@0.15.0)
       '@firebase/storage-types': 0.8.4(@firebase/app-types@0.9.5)(@firebase/util@1.15.1)
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2613,9 +2617,9 @@ snapshots:
       '@firebase/app-types': 0.9.5
       '@firebase/util': 1.15.1
 
-  '@firebase/storage@0.14.3(@firebase/app@0.14.13)':
+  '@firebase/storage@0.14.3(@firebase/app@0.15.0)':
     dependencies:
-      '@firebase/app': 0.14.13
+      '@firebase/app': 0.15.0
       '@firebase/component': 0.7.3
       '@firebase/util': 1.15.1
       tslib: 2.8.1
@@ -2637,11 +2641,11 @@ snapshots:
 
   '@floating-ui/utils@0.2.11': {}
 
-  '@floating-ui/vue@1.1.11(vue@3.5.38)':
+  '@floating-ui/vue@1.1.11(vue@3.5.39)':
     dependencies:
       '@floating-ui/dom': 1.7.6
       '@floating-ui/utils': 0.2.11
-      vue-demi: 0.14.10(vue@3.5.38)
+      vue-demi: 0.14.10(vue@3.5.39)
     transitivePeerDependencies:
       - '@vue/composition-api'
       - vue
@@ -2664,10 +2668,10 @@ snapshots:
 
   '@iconify/types@2.0.0': {}
 
-  '@iconify/vue@5.0.1(vue@3.5.38)':
+  '@iconify/vue@5.0.1(vue@3.5.39)':
     dependencies:
       '@iconify/types': 2.0.0
-      vue: 3.5.38
+      vue: 3.5.39
 
   '@internationalized/date@3.12.1':
     dependencies:
@@ -2677,23 +2681,23 @@ snapshots:
     dependencies:
       '@swc/helpers': 0.5.21
 
-  '@intlify/core-base@11.4.5':
+  '@intlify/core-base@11.4.6':
     dependencies:
-      '@intlify/devtools-types': 11.4.5
-      '@intlify/message-compiler': 11.4.5
-      '@intlify/shared': 11.4.5
+      '@intlify/devtools-types': 11.4.6
+      '@intlify/message-compiler': 11.4.6
+      '@intlify/shared': 11.4.6
 
-  '@intlify/devtools-types@11.4.5':
+  '@intlify/devtools-types@11.4.6':
     dependencies:
-      '@intlify/core-base': 11.4.5
-      '@intlify/shared': 11.4.5
+      '@intlify/core-base': 11.4.6
+      '@intlify/shared': 11.4.6
 
-  '@intlify/message-compiler@11.4.5':
+  '@intlify/message-compiler@11.4.6':
     dependencies:
-      '@intlify/shared': 11.4.5
+      '@intlify/shared': 11.4.6
       source-map-js: 1.2.1
 
-  '@intlify/shared@11.4.5': {}
+  '@intlify/shared@11.4.6': {}
 
   '@isaacs/fs-minipass@4.0.1':
     dependencies:
@@ -2718,7 +2722,7 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
-  '@khmyznikov/pwa-install@0.6.3(@lit/react@1.0.8(@types/react@19.2.14))(@types/dom-chromium-installation-events@101.0.4)(@types/web-app-manifest@1.0.9)(lit@3.3.2)':
+  '@khmyznikov/pwa-install@0.6.4(@lit/react@1.0.8(@types/react@19.2.14))(@types/dom-chromium-installation-events@101.0.4)(@types/web-app-manifest@1.0.9)(lit@3.3.2)':
     dependencies:
       '@lit/react': 1.0.8(@types/react@19.2.14)
       '@types/dom-chromium-installation-events': 101.0.4
@@ -2737,18 +2741,18 @@ snapshots:
     dependencies:
       '@lit-labs/ssr-dom-shim': 1.5.1
 
-  '@lucide/vue@1.18.0(vue@3.5.38)':
+  '@lucide/vue@1.22.0(vue@3.5.39)':
     dependencies:
-      vue: 3.5.38
+      vue: 3.5.39
 
-  '@napi-rs/wasm-runtime@1.1.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
+  '@napi-rs/wasm-runtime@1.1.5(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)':
     dependencies:
-      '@emnapi/core': 1.10.0
-      '@emnapi/runtime': 1.10.0
+      '@emnapi/core': 1.11.1
+      '@emnapi/runtime': 1.11.1
       '@tybys/wasm-util': 0.10.2
     optional: true
 
-  '@oxc-project/types@0.133.0': {}
+  '@oxc-project/types@0.137.0': {}
 
   '@pinojs/redact@0.4.0': {}
 
@@ -2775,53 +2779,53 @@ snapshots:
 
   '@protobufjs/utf8@1.1.1': {}
 
-  '@rolldown/binding-android-arm64@1.0.3':
+  '@rolldown/binding-android-arm64@1.1.2':
     optional: true
 
-  '@rolldown/binding-darwin-arm64@1.0.3':
+  '@rolldown/binding-darwin-arm64@1.1.2':
     optional: true
 
-  '@rolldown/binding-darwin-x64@1.0.3':
+  '@rolldown/binding-darwin-x64@1.1.2':
     optional: true
 
-  '@rolldown/binding-freebsd-x64@1.0.3':
+  '@rolldown/binding-freebsd-x64@1.1.2':
     optional: true
 
-  '@rolldown/binding-linux-arm-gnueabihf@1.0.3':
+  '@rolldown/binding-linux-arm-gnueabihf@1.1.2':
     optional: true
 
-  '@rolldown/binding-linux-arm64-gnu@1.0.3':
+  '@rolldown/binding-linux-arm64-gnu@1.1.2':
     optional: true
 
-  '@rolldown/binding-linux-arm64-musl@1.0.3':
+  '@rolldown/binding-linux-arm64-musl@1.1.2':
     optional: true
 
-  '@rolldown/binding-linux-ppc64-gnu@1.0.3':
+  '@rolldown/binding-linux-ppc64-gnu@1.1.2':
     optional: true
 
-  '@rolldown/binding-linux-s390x-gnu@1.0.3':
+  '@rolldown/binding-linux-s390x-gnu@1.1.2':
     optional: true
 
-  '@rolldown/binding-linux-x64-gnu@1.0.3':
+  '@rolldown/binding-linux-x64-gnu@1.1.2':
     optional: true
 
-  '@rolldown/binding-linux-x64-musl@1.0.3':
+  '@rolldown/binding-linux-x64-musl@1.1.2':
     optional: true
 
-  '@rolldown/binding-openharmony-arm64@1.0.3':
+  '@rolldown/binding-openharmony-arm64@1.1.2':
     optional: true
 
-  '@rolldown/binding-wasm32-wasi@1.0.3':
+  '@rolldown/binding-wasm32-wasi@1.1.2':
     dependencies:
-      '@emnapi/core': 1.10.0
-      '@emnapi/runtime': 1.10.0
-      '@napi-rs/wasm-runtime': 1.1.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      '@emnapi/core': 1.11.1
+      '@emnapi/runtime': 1.11.1
+      '@napi-rs/wasm-runtime': 1.1.5(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)
     optional: true
 
-  '@rolldown/binding-win32-arm64-msvc@1.0.3':
+  '@rolldown/binding-win32-arm64-msvc@1.1.2':
     optional: true
 
-  '@rolldown/binding-win32-x64-msvc@1.0.3':
+  '@rolldown/binding-win32-x64-msvc@1.1.2':
     optional: true
 
   '@rolldown/pluginutils@1.0.1': {}
@@ -2830,7 +2834,7 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
-  '@tailwindcss/node@4.3.1':
+  '@tailwindcss/node@4.3.2':
     dependencies:
       '@jridgewell/remapping': 2.3.5
       enhanced-resolve: 5.21.6
@@ -2838,81 +2842,81 @@ snapshots:
       lightningcss: 1.32.0
       magic-string: 0.30.21
       source-map-js: 1.2.1
-      tailwindcss: 4.3.1
+      tailwindcss: 4.3.2
 
-  '@tailwindcss/oxide-android-arm64@4.3.1':
+  '@tailwindcss/oxide-android-arm64@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-darwin-arm64@4.3.1':
+  '@tailwindcss/oxide-darwin-arm64@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-darwin-x64@4.3.1':
+  '@tailwindcss/oxide-darwin-x64@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-freebsd-x64@4.3.1':
+  '@tailwindcss/oxide-freebsd-x64@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.1':
+  '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-linux-arm64-gnu@4.3.1':
+  '@tailwindcss/oxide-linux-arm64-gnu@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-linux-arm64-musl@4.3.1':
+  '@tailwindcss/oxide-linux-arm64-musl@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-linux-x64-gnu@4.3.1':
+  '@tailwindcss/oxide-linux-x64-gnu@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-linux-x64-musl@4.3.1':
+  '@tailwindcss/oxide-linux-x64-musl@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-wasm32-wasi@4.3.1':
+  '@tailwindcss/oxide-wasm32-wasi@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-win32-arm64-msvc@4.3.1':
+  '@tailwindcss/oxide-win32-arm64-msvc@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide-win32-x64-msvc@4.3.1':
+  '@tailwindcss/oxide-win32-x64-msvc@4.3.2':
     optional: true
 
-  '@tailwindcss/oxide@4.3.1':
+  '@tailwindcss/oxide@4.3.2':
     optionalDependencies:
-      '@tailwindcss/oxide-android-arm64': 4.3.1
-      '@tailwindcss/oxide-darwin-arm64': 4.3.1
-      '@tailwindcss/oxide-darwin-x64': 4.3.1
-      '@tailwindcss/oxide-freebsd-x64': 4.3.1
-      '@tailwindcss/oxide-linux-arm-gnueabihf': 4.3.1
-      '@tailwindcss/oxide-linux-arm64-gnu': 4.3.1
-      '@tailwindcss/oxide-linux-arm64-musl': 4.3.1
-      '@tailwindcss/oxide-linux-x64-gnu': 4.3.1
-      '@tailwindcss/oxide-linux-x64-musl': 4.3.1
-      '@tailwindcss/oxide-wasm32-wasi': 4.3.1
-      '@tailwindcss/oxide-win32-arm64-msvc': 4.3.1
-      '@tailwindcss/oxide-win32-x64-msvc': 4.3.1
-
-  '@tailwindcss/vite@4.3.1(vite@8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))':
-    dependencies:
-      '@tailwindcss/node': 4.3.1
-      '@tailwindcss/oxide': 4.3.1
-      tailwindcss: 4.3.1
-      vite: 8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
+      '@tailwindcss/oxide-android-arm64': 4.3.2
+      '@tailwindcss/oxide-darwin-arm64': 4.3.2
+      '@tailwindcss/oxide-darwin-x64': 4.3.2
+      '@tailwindcss/oxide-freebsd-x64': 4.3.2
+      '@tailwindcss/oxide-linux-arm-gnueabihf': 4.3.2
+      '@tailwindcss/oxide-linux-arm64-gnu': 4.3.2
+      '@tailwindcss/oxide-linux-arm64-musl': 4.3.2
+      '@tailwindcss/oxide-linux-x64-gnu': 4.3.2
+      '@tailwindcss/oxide-linux-x64-musl': 4.3.2
+      '@tailwindcss/oxide-wasm32-wasi': 4.3.2
+      '@tailwindcss/oxide-win32-arm64-msvc': 4.3.2
+      '@tailwindcss/oxide-win32-x64-msvc': 4.3.2
+
+  '@tailwindcss/vite@4.3.2(vite@8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))':
+    dependencies:
+      '@tailwindcss/node': 4.3.2
+      '@tailwindcss/oxide': 4.3.2
+      tailwindcss: 4.3.2
+      vite: 8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
 
   '@tanstack/table-core@8.21.3': {}
 
   '@tanstack/virtual-core@3.14.0': {}
 
-  '@tanstack/vue-table@8.21.3(vue@3.5.38)':
+  '@tanstack/vue-table@8.21.3(vue@3.5.39)':
     dependencies:
       '@tanstack/table-core': 8.21.3
-      vue: 3.5.38
+      vue: 3.5.39
 
-  '@tanstack/vue-virtual@3.13.24(vue@3.5.38)':
+  '@tanstack/vue-virtual@3.13.24(vue@3.5.39)':
     dependencies:
       '@tanstack/virtual-core': 3.14.0
-      vue: 3.5.38
+      vue: 3.5.39
 
-  '@thumbmarkjs/thumbmarkjs@1.9.1': {}
+  '@thumbmarkjs/thumbmarkjs@1.10.0': {}
 
   '@tybys/wasm-util@0.10.2':
     dependencies:
@@ -2939,59 +2943,47 @@ snapshots:
 
   '@types/web-bluetooth@0.0.21': {}
 
-  '@vitejs/plugin-vue@6.0.7(vite@8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.38)':
+  '@vitejs/plugin-vue@6.0.7(vite@8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.39)':
     dependencies:
       '@rolldown/pluginutils': 1.0.1
-      vite: 8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
-      vue: 3.5.38
+      vite: 8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
+      vue: 3.5.39
 
-  '@vue-macros/common@3.1.2(vue@3.5.38)':
+  '@vue-macros/common@3.1.2(vue@3.5.39)':
     dependencies:
-      '@vue/compiler-sfc': 3.5.35
+      '@vue/compiler-sfc': 3.5.38
       ast-kit: 2.2.0
       local-pkg: 1.1.2
       magic-string-ast: 1.0.3
       unplugin-utils: 0.3.1
     optionalDependencies:
-      vue: 3.5.38
+      vue: 3.5.39
 
-  '@vue/compiler-core@3.5.35':
+  '@vue/compiler-core@3.5.38':
     dependencies:
-      '@babel/parser': 7.29.3
-      '@vue/shared': 3.5.35
+      '@babel/parser': 7.29.7
+      '@vue/shared': 3.5.38
       entities: 7.0.1
       estree-walker: 2.0.2
       source-map-js: 1.2.1
 
-  '@vue/compiler-core@3.5.38':
+  '@vue/compiler-core@3.5.39':
     dependencies:
       '@babel/parser': 7.29.7
-      '@vue/shared': 3.5.38
+      '@vue/shared': 3.5.39
       entities: 7.0.1
       estree-walker: 2.0.2
       source-map-js: 1.2.1
 
-  '@vue/compiler-dom@3.5.35':
-    dependencies:
-      '@vue/compiler-core': 3.5.35
-      '@vue/shared': 3.5.35
-
   '@vue/compiler-dom@3.5.38':
     dependencies:
       '@vue/compiler-core': 3.5.38
       '@vue/shared': 3.5.38
 
-  '@vue/compiler-sfc@3.5.35':
+  '@vue/compiler-dom@3.5.39':
     dependencies:
-      '@babel/parser': 7.29.3
-      '@vue/compiler-core': 3.5.35
-      '@vue/compiler-dom': 3.5.35
-      '@vue/compiler-ssr': 3.5.35
-      '@vue/shared': 3.5.35
-      estree-walker: 2.0.2
-      magic-string: 0.30.21
-      postcss: 8.5.15
-      source-map-js: 1.2.1
+      '@vue/compiler-core': 3.5.39
+      '@vue/shared': 3.5.39
 
   '@vue/compiler-sfc@3.5.38':
     dependencies:
@@ -3005,16 +2997,28 @@ snapshots:
       postcss: 8.5.15
       source-map-js: 1.2.1
 
-  '@vue/compiler-ssr@3.5.35':
+  '@vue/compiler-sfc@3.5.39':
     dependencies:
-      '@vue/compiler-dom': 3.5.35
-      '@vue/shared': 3.5.35
+      '@babel/parser': 7.29.7
+      '@vue/compiler-core': 3.5.39
+      '@vue/compiler-dom': 3.5.39
+      '@vue/compiler-ssr': 3.5.39
+      '@vue/shared': 3.5.39
+      estree-walker: 2.0.2
+      magic-string: 0.30.21
+      postcss: 8.5.15
+      source-map-js: 1.2.1
 
   '@vue/compiler-ssr@3.5.38':
     dependencies:
       '@vue/compiler-dom': 3.5.38
       '@vue/shared': 3.5.38
 
+  '@vue/compiler-ssr@3.5.39':
+    dependencies:
+      '@vue/compiler-dom': 3.5.39
+      '@vue/shared': 3.5.39
+
   '@vue/devtools-api@6.6.4': {}
 
   '@vue/devtools-api@7.7.8':
@@ -3048,63 +3052,63 @@ snapshots:
 
   '@vue/devtools-shared@8.1.2': {}
 
-  '@vue/reactivity@3.5.38':
+  '@vue/reactivity@3.5.39':
     dependencies:
-      '@vue/shared': 3.5.38
+      '@vue/shared': 3.5.39
 
-  '@vue/runtime-core@3.5.38':
+  '@vue/runtime-core@3.5.39':
     dependencies:
-      '@vue/reactivity': 3.5.38
-      '@vue/shared': 3.5.38
+      '@vue/reactivity': 3.5.39
+      '@vue/shared': 3.5.39
 
-  '@vue/runtime-dom@3.5.38':
+  '@vue/runtime-dom@3.5.39':
     dependencies:
-      '@vue/reactivity': 3.5.38
-      '@vue/runtime-core': 3.5.38
-      '@vue/shared': 3.5.38
+      '@vue/reactivity': 3.5.39
+      '@vue/runtime-core': 3.5.39
+      '@vue/shared': 3.5.39
       csstype: 3.2.3
 
-  '@vue/server-renderer@3.5.38(vue@3.5.38)':
+  '@vue/server-renderer@3.5.39(vue@3.5.39)':
     dependencies:
-      '@vue/compiler-ssr': 3.5.38
-      '@vue/shared': 3.5.38
-      vue: 3.5.38
-
-  '@vue/shared@3.5.35': {}
+      '@vue/compiler-ssr': 3.5.39
+      '@vue/shared': 3.5.39
+      vue: 3.5.39
 
   '@vue/shared@3.5.38': {}
 
-  '@vueuse/core@10.11.1(vue@3.5.38)':
+  '@vue/shared@3.5.39': {}
+
+  '@vueuse/core@10.11.1(vue@3.5.39)':
     dependencies:
       '@types/web-bluetooth': 0.0.20
       '@vueuse/metadata': 10.11.1
-      '@vueuse/shared': 10.11.1(vue@3.5.38)
-      vue-demi: 0.14.10(vue@3.5.38)
+      '@vueuse/shared': 10.11.1(vue@3.5.39)
+      vue-demi: 0.14.10(vue@3.5.39)
     transitivePeerDependencies:
       - '@vue/composition-api'
       - vue
 
-  '@vueuse/core@14.3.0(vue@3.5.38)':
+  '@vueuse/core@14.3.0(vue@3.5.39)':
     dependencies:
       '@types/web-bluetooth': 0.0.21
       '@vueuse/metadata': 14.3.0
-      '@vueuse/shared': 14.3.0(vue@3.5.38)
-      vue: 3.5.38
+      '@vueuse/shared': 14.3.0(vue@3.5.39)
+      vue: 3.5.39
 
   '@vueuse/metadata@10.11.1': {}
 
   '@vueuse/metadata@14.3.0': {}
 
-  '@vueuse/shared@10.11.1(vue@3.5.38)':
+  '@vueuse/shared@10.11.1(vue@3.5.39)':
     dependencies:
-      vue-demi: 0.14.10(vue@3.5.38)
+      vue-demi: 0.14.10(vue@3.5.39)
     transitivePeerDependencies:
       - '@vue/composition-api'
       - vue
 
-  '@vueuse/shared@14.3.0(vue@3.5.38)':
+  '@vueuse/shared@14.3.0(vue@3.5.39)':
     dependencies:
-      vue: 3.5.38
+      vue: 3.5.39
 
   accepts@2.0.0:
     dependencies:
@@ -3250,14 +3254,14 @@ snapshots:
 
   clsx@2.1.1: {}
 
-  code-inspector-plugin@1.6.0:
+  code-inspector-plugin@1.6.3:
     dependencies:
-      '@code-inspector/core': 1.6.0
-      '@code-inspector/esbuild': 1.6.0
-      '@code-inspector/mako': 1.6.0
-      '@code-inspector/turbopack': 1.6.0
-      '@code-inspector/vite': 1.6.0
-      '@code-inspector/webpack': 1.6.0
+      '@code-inspector/core': 1.6.3
+      '@code-inspector/esbuild': 1.6.3
+      '@code-inspector/mako': 1.6.3
+      '@code-inspector/turbopack': 1.6.3
+      '@code-inspector/vite': 1.6.3
+      '@code-inspector/webpack': 1.6.3
       chalk: 4.1.1
     transitivePeerDependencies:
       - supports-color
@@ -3445,35 +3449,35 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  firebase@12.14.0:
+  firebase@12.15.0:
     dependencies:
-      '@firebase/ai': 2.13.0(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)
-      '@firebase/analytics': 0.10.22(@firebase/app@0.14.13)
-      '@firebase/analytics-compat': 0.2.28(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)
-      '@firebase/app': 0.14.13
-      '@firebase/app-check': 0.11.4(@firebase/app@0.14.13)
-      '@firebase/app-check-compat': 0.4.4(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)
-      '@firebase/app-compat': 0.5.13
+      '@firebase/ai': 2.13.1(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)
+      '@firebase/analytics': 0.10.22(@firebase/app@0.15.0)
+      '@firebase/analytics-compat': 0.2.28(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)
+      '@firebase/app': 0.15.0
+      '@firebase/app-check': 0.12.0(@firebase/app@0.15.0)
+      '@firebase/app-check-compat': 0.4.5(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)
+      '@firebase/app-compat': 0.5.14
       '@firebase/app-types': 0.9.5
-      '@firebase/auth': 1.13.2(@firebase/app@0.14.13)
-      '@firebase/auth-compat': 0.6.7(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)
-      '@firebase/data-connect': 0.7.1(@firebase/app@0.14.13)
+      '@firebase/auth': 1.13.3(@firebase/app@0.15.0)
+      '@firebase/auth-compat': 0.6.8(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)
+      '@firebase/data-connect': 0.7.1(@firebase/app@0.15.0)
       '@firebase/database': 1.1.3
       '@firebase/database-compat': 2.1.4
-      '@firebase/firestore': 4.15.0(@firebase/app@0.14.13)
-      '@firebase/firestore-compat': 0.4.10(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)
-      '@firebase/functions': 0.13.5(@firebase/app@0.14.13)
-      '@firebase/functions-compat': 0.4.5(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)
-      '@firebase/installations': 0.6.22(@firebase/app@0.14.13)
-      '@firebase/installations-compat': 0.2.22(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)
-      '@firebase/messaging': 0.13.0(@firebase/app@0.14.13)
-      '@firebase/messaging-compat': 0.2.27(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)
-      '@firebase/performance': 0.7.12(@firebase/app@0.14.13)
-      '@firebase/performance-compat': 0.2.25(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)
-      '@firebase/remote-config': 0.8.4(@firebase/app@0.14.13)
-      '@firebase/remote-config-compat': 0.2.25(@firebase/app-compat@0.5.13)(@firebase/app@0.14.13)
-      '@firebase/storage': 0.14.3(@firebase/app@0.14.13)
-      '@firebase/storage-compat': 0.4.3(@firebase/app-compat@0.5.13)(@firebase/app-types@0.9.5)(@firebase/app@0.14.13)
+      '@firebase/firestore': 4.16.0(@firebase/app@0.15.0)
+      '@firebase/firestore-compat': 0.4.11(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)
+      '@firebase/functions': 0.13.5(@firebase/app@0.15.0)
+      '@firebase/functions-compat': 0.4.5(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)
+      '@firebase/installations': 0.6.22(@firebase/app@0.15.0)
+      '@firebase/installations-compat': 0.2.22(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)
+      '@firebase/messaging': 0.13.0(@firebase/app@0.15.0)
+      '@firebase/messaging-compat': 0.2.27(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)
+      '@firebase/performance': 0.7.12(@firebase/app@0.15.0)
+      '@firebase/performance-compat': 0.2.25(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)
+      '@firebase/remote-config': 0.8.5(@firebase/app@0.15.0)
+      '@firebase/remote-config-compat': 0.2.26(@firebase/app-compat@0.5.14)(@firebase/app@0.15.0)
+      '@firebase/storage': 0.14.3(@firebase/app@0.15.0)
+      '@firebase/storage-compat': 0.4.3(@firebase/app-compat@0.5.14)(@firebase/app-types@0.9.5)(@firebase/app@0.15.0)
       '@firebase/util': 1.15.1
     transitivePeerDependencies:
       - '@react-native-async-storage/async-storage'
@@ -3547,7 +3551,7 @@ snapshots:
 
   http-parser-js@0.5.10: {}
 
-  http-proxy-middleware@4.1.0:
+  http-proxy-middleware@4.1.1(supports-color@5.5.0):
     dependencies:
       debug: 4.4.3(supports-color@5.5.0)
       httpxy: 0.5.3
@@ -3817,10 +3821,10 @@ snapshots:
 
   picomatch@4.0.4: {}
 
-  pinia@3.0.4(vue@3.5.38):
+  pinia@3.0.4(vue@3.5.39):
     dependencies:
       '@vue/devtools-api': 7.7.8
-      vue: 3.5.38
+      vue: 3.5.39
 
   pino-abstract-transport@3.0.0:
     dependencies:
@@ -3940,6 +3944,8 @@ snapshots:
       iconv-lite: 0.7.1
       unpipe: 1.0.0
 
+  re2js@0.4.3: {}
+
   readdirp@3.6.0:
     dependencies:
       picomatch: 2.3.2
@@ -3948,19 +3954,19 @@ snapshots:
 
   real-require@0.2.0: {}
 
-  reka-ui@2.9.10(vue@3.5.38):
+  reka-ui@2.10.1(vue@3.5.39):
     dependencies:
       '@floating-ui/dom': 1.7.6
-      '@floating-ui/vue': 1.1.11(vue@3.5.38)
+      '@floating-ui/vue': 1.1.11(vue@3.5.39)
       '@internationalized/date': 3.12.1
       '@internationalized/number': 3.6.6
-      '@tanstack/vue-virtual': 3.13.24(vue@3.5.38)
-      '@vueuse/core': 14.3.0(vue@3.5.38)
-      '@vueuse/shared': 14.3.0(vue@3.5.38)
+      '@tanstack/vue-virtual': 3.13.24(vue@3.5.39)
+      '@vueuse/core': 14.3.0(vue@3.5.39)
+      '@vueuse/shared': 14.3.0(vue@3.5.39)
       aria-hidden: 1.2.6
       defu: 6.1.7
       ohash: 2.0.11
-      vue: 3.5.38
+      vue: 3.5.39
     transitivePeerDependencies:
       - '@vue/composition-api'
 
@@ -3968,26 +3974,26 @@ snapshots:
 
   rfdc@1.4.1: {}
 
-  rolldown@1.0.3:
+  rolldown@1.1.2:
     dependencies:
-      '@oxc-project/types': 0.133.0
+      '@oxc-project/types': 0.137.0
       '@rolldown/pluginutils': 1.0.1
     optionalDependencies:
-      '@rolldown/binding-android-arm64': 1.0.3
-      '@rolldown/binding-darwin-arm64': 1.0.3
-      '@rolldown/binding-darwin-x64': 1.0.3
-      '@rolldown/binding-freebsd-x64': 1.0.3
-      '@rolldown/binding-linux-arm-gnueabihf': 1.0.3
-      '@rolldown/binding-linux-arm64-gnu': 1.0.3
-      '@rolldown/binding-linux-arm64-musl': 1.0.3
-      '@rolldown/binding-linux-ppc64-gnu': 1.0.3
-      '@rolldown/binding-linux-s390x-gnu': 1.0.3
-      '@rolldown/binding-linux-x64-gnu': 1.0.3
-      '@rolldown/binding-linux-x64-musl': 1.0.3
-      '@rolldown/binding-openharmony-arm64': 1.0.3
-      '@rolldown/binding-wasm32-wasi': 1.0.3
-      '@rolldown/binding-win32-arm64-msvc': 1.0.3
-      '@rolldown/binding-win32-x64-msvc': 1.0.3
+      '@rolldown/binding-android-arm64': 1.1.2
+      '@rolldown/binding-darwin-arm64': 1.1.2
+      '@rolldown/binding-darwin-x64': 1.1.2
+      '@rolldown/binding-freebsd-x64': 1.1.2
+      '@rolldown/binding-linux-arm-gnueabihf': 1.1.2
+      '@rolldown/binding-linux-arm64-gnu': 1.1.2
+      '@rolldown/binding-linux-arm64-musl': 1.1.2
+      '@rolldown/binding-linux-ppc64-gnu': 1.1.2
+      '@rolldown/binding-linux-s390x-gnu': 1.1.2
+      '@rolldown/binding-linux-x64-gnu': 1.1.2
+      '@rolldown/binding-linux-x64-musl': 1.1.2
+      '@rolldown/binding-openharmony-arm64': 1.1.2
+      '@rolldown/binding-wasm32-wasi': 1.1.2
+      '@rolldown/binding-win32-arm64-msvc': 1.1.2
+      '@rolldown/binding-win32-x64-msvc': 1.1.2
 
   router@2.2.0(supports-color@5.5.0):
     dependencies:
@@ -4132,11 +4138,11 @@ snapshots:
 
   tailwind-merge@3.6.0: {}
 
-  tailwindcss@4.3.1: {}
+  tailwindcss@4.3.2: {}
 
   tapable@2.3.3: {}
 
-  tar@7.5.16:
+  tar@7.5.19:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
@@ -4218,11 +4224,11 @@ snapshots:
 
   vary@1.1.2: {}
 
-  vaul-vue@0.4.1(reka-ui@2.9.10(vue@3.5.38))(vue@3.5.38):
+  vaul-vue@0.4.1(reka-ui@2.10.1(vue@3.5.39))(vue@3.5.39):
     dependencies:
-      '@vueuse/core': 10.11.1(vue@3.5.38)
-      reka-ui: 2.9.10(vue@3.5.38)
-      vue: 3.5.38
+      '@vueuse/core': 10.11.1(vue@3.5.39)
+      reka-ui: 2.10.1(vue@3.5.39)
+      vue: 3.5.39
     transitivePeerDependencies:
       - '@vue/composition-api'
 
@@ -4233,12 +4239,12 @@ snapshots:
       core-js: 3.49.0
       mutation-observer: 1.0.3
 
-  vite@8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0):
+  vite@8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.32.0
       picomatch: 4.0.4
       postcss: 8.5.15
-      rolldown: 1.0.3
+      rolldown: 1.1.2
       tinyglobby: 0.2.17
     optionalDependencies:
       '@types/node': 24.1.0
@@ -4246,27 +4252,27 @@ snapshots:
       jiti: 2.7.0
       yaml: 2.9.0
 
-  vue-demi@0.14.10(vue@3.5.38):
+  vue-demi@0.14.10(vue@3.5.39):
     dependencies:
-      vue: 3.5.38
+      vue: 3.5.39
 
-  vue-i18n@11.4.5(vue@3.5.38):
+  vue-i18n@11.4.6(vue@3.5.39):
     dependencies:
-      '@intlify/core-base': 11.4.5
-      '@intlify/devtools-types': 11.4.5
-      '@intlify/shared': 11.4.5
+      '@intlify/core-base': 11.4.6
+      '@intlify/devtools-types': 11.4.6
+      '@intlify/shared': 11.4.6
       '@vue/devtools-api': 6.6.4
-      vue: 3.5.38
+      vue: 3.5.39
 
-  vue-markdown-render@2.3.1(vue@3.5.38):
+  vue-markdown-render@2.3.1(vue@3.5.39):
     dependencies:
       markdown-it: 14.2.0
-      vue: 3.5.38
+      vue: 3.5.39
 
-  vue-router@5.1.0(@vue/compiler-sfc@3.5.38)(pinia@3.0.4(vue@3.5.38))(vite@8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.38):
+  vue-router@5.1.0(@vue/compiler-sfc@3.5.39)(pinia@3.0.4(vue@3.5.39))(vite@8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0))(vue@3.5.39):
     dependencies:
       '@babel/generator': 8.0.0-rc.6
-      '@vue-macros/common': 3.1.2(vue@3.5.38)
+      '@vue-macros/common': 3.1.2(vue@3.5.39)
       '@vue/devtools-api': 8.1.2
       ast-walker-scope: 0.9.0
       chokidar: 5.0.0
@@ -4281,22 +4287,22 @@ snapshots:
       tinyglobby: 0.2.16
       unplugin: 3.0.0
       unplugin-utils: 0.3.1
-      vue: 3.5.38
+      vue: 3.5.39
       yaml: 2.9.0
     optionalDependencies:
-      '@vue/compiler-sfc': 3.5.38
-      pinia: 3.0.4(vue@3.5.38)
-      vite: 8.0.16(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
+      '@vue/compiler-sfc': 3.5.39
+      pinia: 3.0.4(vue@3.5.39)
+      vite: 8.1.0(@types/node@24.1.0)(jiti@2.7.0)(yaml@2.9.0)
 
   vue-sonner@2.0.9: {}
 
-  vue@3.5.38:
+  vue@3.5.39:
     dependencies:
-      '@vue/compiler-dom': 3.5.38
-      '@vue/compiler-sfc': 3.5.38
-      '@vue/runtime-dom': 3.5.38
-      '@vue/server-renderer': 3.5.38(vue@3.5.38)
-      '@vue/shared': 3.5.38
+      '@vue/compiler-dom': 3.5.39
+      '@vue/compiler-sfc': 3.5.39
+      '@vue/runtime-dom': 3.5.39
+      '@vue/server-renderer': 3.5.39(vue@3.5.39)
+      '@vue/shared': 3.5.39
 
   web-vitals@4.2.4: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index e173b2f6e..dd44199e4 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -3,3 +3,29 @@ allowBuilds:
   core-js: true
   protobufjs: true
   vue-demi: true
+minimumReleaseAgeExclude:
+  - vite@8.1.0
+  - tar@7.5.19
+  - '@code-inspector/core@1.6.3'
+  - '@code-inspector/esbuild@1.6.3'
+  - '@code-inspector/mako@1.6.3'
+  - '@code-inspector/turbopack@1.6.3'
+  - '@code-inspector/vite@1.6.3'
+  - '@code-inspector/webpack@1.6.3'
+  - '@tailwindcss/node@4.3.2'
+  - '@tailwindcss/oxide-android-arm64@4.3.2'
+  - '@tailwindcss/oxide-darwin-arm64@4.3.2'
+  - '@tailwindcss/oxide-darwin-x64@4.3.2'
+  - '@tailwindcss/oxide-freebsd-x64@4.3.2'
+  - '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.2'
+  - '@tailwindcss/oxide-linux-arm64-gnu@4.3.2'
+  - '@tailwindcss/oxide-linux-arm64-musl@4.3.2'
+  - '@tailwindcss/oxide-linux-x64-gnu@4.3.2'
+  - '@tailwindcss/oxide-linux-x64-musl@4.3.2'
+  - '@tailwindcss/oxide-wasm32-wasi@4.3.2'
+  - '@tailwindcss/oxide-win32-arm64-msvc@4.3.2'
+  - '@tailwindcss/oxide-win32-x64-msvc@4.3.2'
+  - '@tailwindcss/oxide@4.3.2'
+  - '@tailwindcss/vite@4.3.2'
+  - code-inspector-plugin@1.6.3
+  - tailwindcss@4.3.2
diff --git a/tests/api-handlers.test.js b/tests/api-handlers.test.js
index aacbf2c7a..8b6390b37 100644
--- a/tests/api-handlers.test.js
+++ b/tests/api-handlers.test.js
@@ -19,6 +19,7 @@ import getWhoisHandler from '../api/get-whois.js';
 import cfRadarHandler from '../api/cf-radar.js';
 import invisibilityHandler from '../api/invisibility-test.js';
 import macCheckerHandler from '../api/mac-checker.js';
+import githubStarsHandler from '../api/github-stars.js';
 import updateAchievementHandler from '../api/update-user-achievement.js';
 import ipcheckIngHandler from '../api/ipcheck-ing.js';
 import { getSessionResult as dnsLeakGetResult } from '../api/dns-leak-test.js';
@@ -153,6 +154,17 @@ describe('get-whois handler', () => {
     });
 });
 
+// -- github-stars handler -------------------------------------------------
+
+describe('github-stars handler', () => {
+    it('rejects non-GET with 405 before hitting GitHub', async () => {
+        const res = createResponse();
+        await githubStarsHandler(createRequest({ method: 'POST' }), res);
+        assert.equal(res.statusCode, 405);
+        assert.deepEqual(res.body, { message: 'Method Not Allowed' });
+    });
+});
+
 // -- cf-radar handler -----------------------------------------------------
 
 describe('cf-radar handler', () => {
diff --git a/tests/composable-info-mask.test.js b/tests/composable-info-mask.test.js
index f02ff139f..a37bfb355 100644
--- a/tests/composable-info-mask.test.js
+++ b/tests/composable-info-mask.test.js
@@ -2,7 +2,7 @@ import assert from 'node:assert/strict';
 import { describe, it, beforeEach } from 'node:test';
 import { reactive, nextTick } from 'vue';
 
-import { useInfoMask } from '../frontend/composables/use-info-mask.js';
+import { useInfoMask, createMaskGate } from '../frontend/composables/use-info-mask.js';
 
 // minimal i18n stub: return key with prefix for assertions
 const t = (key) => `<${key}>`;
@@ -65,3 +65,22 @@ describe('useInfoMask()', () => {
     });
   });
 });
+
+describe('createMaskGate()', () => {
+  const maskAttr = createMaskGate(t);
+
+  it("masks a real IP value with the 'ip' attribute", () => {
+    assert.equal(maskAttr('1.2.3.4'), 'ip');
+    assert.equal(maskAttr('2001:db8::1'), 'ip');
+  });
+
+  it('leaves waiting / error placeholders unmasked (undefined attr)', () => {
+    for (const key of [
+      'webrtc.StatusWait', 'webrtc.StatusError',
+      'dnsleaktest.StatusWait', 'dnsleaktest.StatusError',
+      'ipInfos.IPv4Error', 'ipInfos.IPv6Error',
+    ]) {
+      assert.equal(maskAttr(t(key)), undefined, `${key} should not be masked`);
+    }
+  });
+});
diff --git a/tests/composable-refresh-orchestrator.test.js b/tests/composable-refresh-orchestrator.test.js
index 479aedaf2..c4b4edc80 100644
--- a/tests/composable-refresh-orchestrator.test.js
+++ b/tests/composable-refresh-orchestrator.test.js
@@ -6,12 +6,18 @@ import { useRefreshOrchestrator } from '../frontend/composables/use-refresh-orch
 
 const t = (k) => `<${k}>`;
 
-function makeStoreStub({ mountedFlags = {}, shouldRefresh = false, autoStart = false } = {}) {
+function makeStoreStub({ mountedFlags = {}, shouldRefresh = false, autoRun = {} } = {}) {
   const state = reactive({
     mountingStatus: { IPInfo: false, Connectivity: false, WebRTC: false, DNSLeakTest: false, ...mountedFlags },
     loadingStatus: { IPInfo: false, Connectivity: false, WebRTC: false, DNSLeakTest: false },
     shouldRefreshEveryThing: shouldRefresh,
-    userPreferences: { autoStart },
+    // Per-module auto-run switches (default all off unless overridden).
+    userPreferences: {
+      autoRunConnectivity: false,
+      autoRunWebRTC: false,
+      autoRunDnsLeak: false,
+      ...autoRun,
+    },
     alertHistory: [],
   });
   return {
@@ -46,10 +52,10 @@ describe('useRefreshOrchestrator()', () => {
     globalThis.setTimeout = realSetTimeout;
   });
 
-  it('loadingControl: all cards mounted + autoStart=true triggers all four checks', () => {
+  it('loadingControl: all cards mounted + every module on triggers all four checks', () => {
     const store = makeStoreStub({
       mountedFlags: { IPInfo: true, Connectivity: true, WebRTC: true, DNSLeakTest: true },
-      autoStart: true,
+      autoRun: { autoRunConnectivity: true, autoRunWebRTC: true, autoRunDnsLeak: true },
     });
     const userPreferences = computed(() => store.state.userPreferences);
     const infoMaskLevel = ref(0);
@@ -64,22 +70,19 @@ describe('useRefreshOrchestrator()', () => {
     assert.deepEqual(calls.dns, [false]);
   });
 
-  it('loadingControl: autoStart=false skips auto checks and flags loading complete', () => {
+  it('loadingControl: every module off skips auto checks and flags loading complete', () => {
     const store = makeStoreStub({
       mountedFlags: { IPInfo: true, Connectivity: true, WebRTC: true, DNSLeakTest: true },
-      autoStart: false,
+      autoRun: { autoRunConnectivity: false, autoRunWebRTC: false, autoRunDnsLeak: false },
     });
     const userPreferences = computed(() => store.state.userPreferences);
     const infoMaskLevel = ref(0);
     const { refs, calls } = makeRefs();
 
-    useRefreshOrchestrator({ refs, store, t, userPreferences, infoMaskLevel });
-
-    // Need to instantiate + call loadingControl — return value carries the action
     const { loadingControl } = useRefreshOrchestrator({ refs, store, t, userPreferences, infoMaskLevel });
     loadingControl();
 
-    assert.equal(calls.ip, 1);
+    assert.equal(calls.ip, 1, 'IP info always runs');
     assert.deepEqual(calls.conn, [], 'connectivity should not auto-run');
     assert.deepEqual(calls.web, [], 'webrtc should not auto-run');
     assert.deepEqual(calls.dns, [], 'dns leak test should not auto-run');
@@ -88,8 +91,32 @@ describe('useRefreshOrchestrator()', () => {
     assert.equal(store.state.loadingStatus.DNSLeakTest, true);
   });
 
+  it('loadingControl: per-module — only the enabled modules run, the rest flag loaded', () => {
+    const store = makeStoreStub({
+      mountedFlags: { IPInfo: true, Connectivity: true, WebRTC: true, DNSLeakTest: true },
+      autoRun: { autoRunConnectivity: true, autoRunWebRTC: false, autoRunDnsLeak: false },
+    });
+    const userPreferences = computed(() => store.state.userPreferences);
+    const infoMaskLevel = ref(0);
+    const { refs, calls } = makeRefs();
+
+    const { loadingControl } = useRefreshOrchestrator({ refs, store, t, userPreferences, infoMaskLevel });
+    loadingControl();
+
+    assert.equal(calls.ip, 1);
+    assert.deepEqual(calls.conn, [undefined], 'connectivity runs');
+    assert.deepEqual(calls.web, [], 'webrtc stays off');
+    assert.deepEqual(calls.dns, [], 'dns stays off');
+    // Connectivity flags itself loaded when its check resolves (not here);
+    // the two disabled modules are flagged loaded immediately.
+    assert.equal(store.state.loadingStatus.WebRTC, true);
+    assert.equal(store.state.loadingStatus.DNSLeakTest, true);
+  });
+
   it('watch: shouldRefreshEveryThing=true triggers full refresh, resets flag + mask', async () => {
-    const store = makeStoreStub({ autoStart: true });
+    // Manual "refresh everything" runs every module regardless of the per-module
+    // auto-run switches, so the prefs here are irrelevant (left at defaults).
+    const store = makeStoreStub();
     const userPreferences = computed(() => store.state.userPreferences);
     const infoMaskLevel = ref(2);
     const { refs, calls } = makeRefs();
@@ -101,7 +128,7 @@ describe('useRefreshOrchestrator()', () => {
     await nextTick();
 
     assert.equal(calls.ip, 1, 'ipcheck refreshes');
-    assert.deepEqual(calls.conn, [true], 'connectivity refresh with forced flag');
+    assert.deepEqual(calls.conn, ['refresh'], 'connectivity refresh via the refresh trigger');
     assert.deepEqual(calls.web, [true]);
     assert.deepEqual(calls.dns, [true]);
     assert.equal(infoMaskLevel.value, 0, 'info mask reset on refresh');
@@ -128,7 +155,6 @@ describe('useRefreshOrchestrator()', () => {
     const store = makeStoreStub({
       // initially no card mounted
       mountedFlags: { IPInfo: false, Connectivity: false, WebRTC: false, DNSLeakTest: false },
-      autoStart: false,
     });
     const userPreferences = computed(() => store.state.userPreferences);
     const infoMaskLevel = ref(0);
diff --git a/tests/default-preferences.test.js b/tests/default-preferences.test.js
index 0bbc66c6e..18cdab7ad 100644
--- a/tests/default-preferences.test.js
+++ b/tests/default-preferences.test.js
@@ -4,6 +4,7 @@ import { describe, it } from 'node:test';
 import {
   DEFAULT_PREFERENCES,
   createDefaultPreferences,
+  migrateLegacyPreferences,
 } from '../frontend/data/default-preferences.js';
 
 describe('DEFAULT_PREFERENCES', () => {
@@ -16,7 +17,9 @@ describe('DEFAULT_PREFERENCES', () => {
       theme: 'auto',
       connectivityMultipleTests: false,
       simpleMode: false,
-      autoStart: true,
+      autoRunConnectivity: true,
+      autoRunWebRTC: true,
+      autoRunDnsLeak: true,
       popupConnectivityNotifications: false,
       ipCardsToShow: 2,
       ipGeoSource: 0,
@@ -26,6 +29,36 @@ describe('DEFAULT_PREFERENCES', () => {
   });
 });
 
+describe('migrateLegacyPreferences()', () => {
+  it('maps a retired autoStart=false onto all three per-module switches', () => {
+    const out = migrateLegacyPreferences({ lang: 'zh', autoStart: false });
+    assert.equal(out.autoRunConnectivity, false);
+    assert.equal(out.autoRunWebRTC, false);
+    assert.equal(out.autoRunDnsLeak, false);
+    assert.equal(out.lang, 'zh', 'other keys carry over');
+    assert.ok(!('autoStart' in out), 'retired key is dropped');
+  });
+
+  it('maps autoStart=true onto all three per-module switches', () => {
+    const out = migrateLegacyPreferences({ autoStart: true });
+    assert.equal(out.autoRunConnectivity, true);
+    assert.equal(out.autoRunWebRTC, true);
+    assert.equal(out.autoRunDnsLeak, true);
+  });
+
+  it('leaves the per-module switches unset when autoStart is absent', () => {
+    const out = migrateLegacyPreferences({ theme: 'dark' });
+    assert.ok(!('autoRunConnectivity' in out), 'falls through to defaults later');
+    assert.equal(out.theme, 'dark');
+  });
+
+  it('returns an empty object for null / non-object input', () => {
+    assert.deepEqual(migrateLegacyPreferences(null), {});
+    assert.deepEqual(migrateLegacyPreferences(undefined), {});
+    assert.deepEqual(migrateLegacyPreferences('nope'), {});
+  });
+});
+
 describe('createDefaultPreferences()', () => {
   it('returns a writable copy with the same values', () => {
     const p = createDefaultPreferences();
diff --git a/tests/format-star-count.test.js b/tests/format-star-count.test.js
new file mode 100644
index 000000000..581ac5860
--- /dev/null
+++ b/tests/format-star-count.test.js
@@ -0,0 +1,36 @@
+// Unit tests for the GitHub star-count compact formatter.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+
+import { formatStarCount } from '../frontend/utils/format-star-count.js';
+
+describe('formatStarCount', () => {
+  it('returns exact integers below 1000', () => {
+    assert.equal(formatStarCount(0), '0');
+    assert.equal(formatStarCount(7), '7');
+    assert.equal(formatStarCount(999), '999');
+  });
+
+  it('collapses thousands to one-decimal k, dropping trailing .0', () => {
+    assert.equal(formatStarCount(1000), '1k');
+    assert.equal(formatStarCount(1234), '1.2k');
+    assert.equal(formatStarCount(2000), '2k');
+    assert.equal(formatStarCount(12345), '12.3k');
+  });
+
+  it('drops the decimal once the k value reaches three digits', () => {
+    assert.equal(formatStarCount(123456), '123k');
+  });
+
+  it('collapses millions to M', () => {
+    assert.equal(formatStarCount(1234567), '1.2M');
+  });
+
+  it('returns empty string for unusable input', () => {
+    assert.equal(formatStarCount(null), '');
+    assert.equal(formatStarCount(undefined), '');
+    assert.equal(formatStarCount(NaN), '');
+    assert.equal(formatStarCount(-5), '');
+    assert.equal(formatStarCount('1234'), '');
+  });
+});
diff --git a/tests/store.test.js b/tests/store.test.js
index ead717ebb..57adcf44b 100644
--- a/tests/store.test.js
+++ b/tests/store.test.js
@@ -146,19 +146,19 @@ describe('store — trigger* actions', () => {
 describe('store — preferences', () => {
   it('setPreferences persists to localStorage', () => {
     const s = useMainStore();
-    s.setPreferences({ lang: 'zh', autoStart: false });
-    assert.deepEqual(s.userPreferences, { lang: 'zh', autoStart: false });
-    const fromStorage = JSON.parse(globalThis.localStorage.getItem('userPreferences_v6'));
-    assert.deepEqual(fromStorage, { lang: 'zh', autoStart: false });
+    s.setPreferences({ lang: 'zh', simpleMode: false });
+    assert.deepEqual(s.userPreferences, { lang: 'zh', simpleMode: false });
+    const fromStorage = JSON.parse(globalThis.localStorage.getItem('userPreferences_v7'));
+    assert.deepEqual(fromStorage, { lang: 'zh', simpleMode: false });
   });
 
   it('updatePreference mutates a single key AND persists', () => {
     const s = useMainStore();
-    s.setPreferences({ lang: 'en', autoStart: true });
-    s.updatePreference('autoStart', false);
-    assert.equal(s.userPreferences.autoStart, false);
-    const fromStorage = JSON.parse(globalThis.localStorage.getItem('userPreferences_v6'));
-    assert.equal(fromStorage.autoStart, false);
+    s.setPreferences({ lang: 'en', autoRunConnectivity: true });
+    s.updatePreference('autoRunConnectivity', false);
+    assert.equal(s.userPreferences.autoRunConnectivity, false);
+    const fromStorage = JSON.parse(globalThis.localStorage.getItem('userPreferences_v7'));
+    assert.equal(fromStorage.autoRunConnectivity, false);
   });
 
   it('loadPreferences seeds defaults when nothing stored', () => {
@@ -168,16 +168,33 @@ describe('store — preferences', () => {
     // just assert the result is a non-empty object and gets persisted.
     assert.equal(typeof s.userPreferences, 'object');
     assert.ok(Object.keys(s.userPreferences).length > 0);
-    assert.ok(globalThis.localStorage.getItem('userPreferences_v6'));
+    assert.ok(globalThis.localStorage.getItem('userPreferences_v7'));
   });
 
   it('loadPreferences merges stored over defaults (stored keys win)', () => {
-    globalThis.localStorage.setItem('userPreferences_v6', JSON.stringify({ lang: 'zh' }));
+    globalThis.localStorage.setItem('userPreferences_v7', JSON.stringify({ lang: 'zh' }));
     const s = useMainStore();
     s.loadPreferences();
     assert.equal(s.userPreferences.lang, 'zh', 'stored lang wins');
-    // A default key still present (autoStart exists in defaults)
-    assert.ok('autoStart' in s.userPreferences, 'default keys fill in missing slots');
+    // A default key still present (autoRunConnectivity exists in defaults)
+    assert.ok('autoRunConnectivity' in s.userPreferences, 'default keys fill in missing slots');
+  });
+
+  it('loadPreferences migrates a legacy v6 autoStart onto the per-module switches', () => {
+    globalThis.localStorage.setItem(
+      'userPreferences_v6',
+      JSON.stringify({ lang: 'fr', autoStart: false }),
+    );
+    const s = useMainStore();
+    s.loadPreferences();
+    assert.equal(s.userPreferences.lang, 'fr', 'other legacy keys carry over');
+    assert.equal(s.userPreferences.autoRunConnectivity, false);
+    assert.equal(s.userPreferences.autoRunWebRTC, false);
+    assert.equal(s.userPreferences.autoRunDnsLeak, false);
+    assert.ok(!('autoStart' in s.userPreferences), 'retired key dropped');
+    // Legacy key purged, value re-saved under the current key.
+    assert.equal(globalThis.localStorage.getItem('userPreferences_v6'), null);
+    assert.ok(globalThis.localStorage.getItem('userPreferences_v7'));
   });
 });
 
diff --git a/tests/timezone.test.js b/tests/timezone.test.js
new file mode 100644
index 000000000..d76aea28f
--- /dev/null
+++ b/tests/timezone.test.js
@@ -0,0 +1,39 @@
+// Tests for frontend/utils/timezone.js. Only the pure offset formatter and the
+// shape of getTimezoneInfo are exercised — the actual zone/offset values depend
+// on the host's timezone, which the Node test runner doesn't pin.
+
+import assert from 'node:assert/strict';
+import { describe, it } from 'node:test';
+
+import { formatUtcOffset, getTimezoneInfo } from '../frontend/utils/timezone.js';
+
+describe('formatUtcOffset', () => {
+  it('formats east-positive offsets with a leading +', () => {
+    assert.equal(formatUtcOffset(480), '+08:00');   // China
+    assert.equal(formatUtcOffset(330), '+05:30');   // India (half-hour)
+    assert.equal(formatUtcOffset(345), '+05:45');   // Nepal (quarter-hour)
+  });
+
+  it('formats west offsets with a leading -', () => {
+    assert.equal(formatUtcOffset(-300), '-05:00');  // US Eastern (DST)
+    assert.equal(formatUtcOffset(-480), '-08:00');  // US Pacific
+  });
+
+  it('treats zero as +00:00', () => {
+    assert.equal(formatUtcOffset(0), '+00:00');
+  });
+});
+
+describe('getTimezoneInfo', () => {
+  it('returns an { timezone, offset } pair of strings', () => {
+    const info = getTimezoneInfo();
+    assert.equal(typeof info.timezone, 'string');
+    assert.equal(typeof info.offset, 'string');
+  });
+
+  it('produces a well-formed offset for the host timezone', () => {
+    const { offset } = getTimezoneInfo();
+    // Empty only on platforms without Date; otherwise must match ±HH:MM.
+    assert.match(offset, /^$|^[+-]\d{2}:\d{2}$/);
+  });
+});
diff --git a/tests/transform-ip-data.test.js b/tests/transform-ip-data.test.js
index 2c5f9cb83..59d83cc65 100644
--- a/tests/transform-ip-data.test.js
+++ b/tests/transform-ip-data.test.js
@@ -64,8 +64,12 @@ describe('transformDataFromIPapi()', () => {
 
   it('builds map URLs with language + dark variant when lat/lon present', () => {
     const out = transformDataFromIPapi(basicRaw, 1, t, 'zh');
-    assert.match(out.mapUrl, /^\/api\/map\?latitude=35\.6938&longitude=139\.7034&language=zh$/);
+    // Map request coords are quantized to 1 decimal for CF edge-cache sharing,
+    // while the displayed lat/lon keep full precision.
+    assert.match(out.mapUrl, /^\/api\/map\?latitude=35\.7&longitude=139\.7&language=zh$/);
     assert.match(out.mapUrl_dark, /CanvasMode=Dark$/);
+    assert.equal(out.latitude, '35.6938');
+    assert.equal(out.longitude, '139.7034');
   });
 
   it("treats country='N/A' as empty country_code", () => {